> 6 months to a year and a half before Boeing thinks they'll have a software patch... That seems silly long

IIRC, SQLite is flight certified...which means that they have to show that every machine code branch is tested by their test suite [1]. This stuff is not developed with the same lax processes as "move fast and break things" web apps.

[1] From some Youtube talk by one of the lead SQLite developers.