SQLCipher 4.0.1 is now available. Please read the full release announcement for important details about the “Magellan” vulnerability, updates, and library compatibility.
The following is a summary of the pertinent changes:
- Based on upstream SQLite 3.26.0, which addresses the SQLite “Magellan” vulnerability
- Adds
PRAGMA cipher_compatibility
andPRAGMA cipher_default_compatibility
which simplify configuration of appropriate compatibility settings for different major SQLCipher major versions - Filters out
ATTACH
statements which containKEY
parameters fromreadline
history when using the command line shell - Fixes a crash in the command line shell when it is provided empty input (e.g.
^D
) - Fixes various compiler warnings related to
strict-prototypes