#1581 javasqlite-20090409-3.fc11 F-11 freeze exception
Closed: Fixed None Opened 15 years ago by scop.

koji build javasqlite-20090409-3.fc11 disables sqlite extension loading which was initially enabled in 20090409-1.fc11. Extension loading in this case is a potential security issue as it allows code that has access to the library in a JVM to load arbitrary native code into the JVM bypassing its security manager checks.

Due to the nature of this issue and after discussing it with upstream, I'm requesting a F-11 freeze exception.

I've verified from the koji build logs that extension loading is indeed off in this build (-DHAVE_SQLITE3_LOAD_EXTENSION=0). This should not be a backwards compatibility issue as extension loading was on only about 10 days in Rawhide/F-11 -only builds.


Login to comment on this ticket.

Metadata