OSS-Fuzz is a Continuous Fuzzing for Open Source Software. When a bug is found, it is filed on bugs.chromium.org instead of the upstream's bugzilla. If the bug at $URL is public, that means that the issue has been fixed in the upstream git repository, so when upstream does not add anything useful in that place, you can: 1) Check the range date when ClusterFuzz has detected that the issue has been fixed and dig into upstream git repository; 2) Check if upstream made a new release after the issue has been fixed; 3) Get in touch with upstream. See $URL for more details about the issue. @maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.
SQLite 3.17.0 is from branch "branch-3.17" created from trunk from 2017-02-09. SQLite 3.17.0 is from 2017-02-13. https://sqlite.org/src/timeline?r=branch-3.17 SQLite 3.18.0 is from branch "branch-3.18" created from trunk from 2017-03-25. SQLite 3.18.0 is from 2017-03-28. https://sqlite.org/src/timeline?r=branch-3.18 Aforementioned regression was never in any released version.
