On 06/26/2016 04:31 PM, Ken Moffat wrote:
Necessary for thunderbird, but worrying : upstream sqlite turned it off by default because it was a potential vulnerability. I came across a post on an sqlite list the other day, suggesting it would be better to do that with a static sqlite (e.g. the version included in thunderbird) so it would be limited to that one application. But then, we prefer system sqlite because in the past there were problems when the version of sqlite in an application differed from the system version.
FWIW, this is how other distros have handled it. That said, as suggested on the sqlite list, using an internal only version is clearly a better solution (if workable). I was just so focused on the segfaults, and enjoying a short lived sense of relief (before I realized that I wasn't actually done), it didn't even occur to me to try the internal version rather than 'fix' the system version. Shouldn't take too long. I'll give them both a rebuild tonight and see how it behaves with internal SQLite. I'll report back when complete.
--DJ -- http://lists.linuxfromscratch.org/listinfo/blfs-dev FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page
