mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-04 22:53:52 -09:00
5b4194680c
https://github.com/jnwatson/py-lmdb/blob/py-lmdb_2.2.0/ChangeLog
Version 2.1.0 fixes the following CVEs:
- **CVE-2019-16224**: heap buffer overflow via `MDB_DUPFIXED` without
`MDB_DUPSORT` in on-disk `md_flags`. (#429)
- **CVE-2019-16225**: `SIGSEGV` from `P_DIRTY` flag set on mmap'd disk pages,
causing `mdb_page_touch()` to skip copy-on-write. (#429)
- **CVE-2019-16226**: out-of-bounds `memmove` in `mdb_node_del` via corrupt
`mn_hi` making `NODEDSZ()` huge. (#429)
- **CVE-2019-16227**: NULL pointer dereference of `mc_xcursor` when
`F_DUPDATA` is set on a node in a non-DUPSORT database. (#429)
- **CVE-2019-16228**: divide-by-zero from zero `mm_psize` in meta page
header. (#429)
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 2286c4a02c)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
18 lines
668 B
Makefile
18 lines
668 B
Makefile
################################################################################
|
|
#
|
|
# python-lmdb
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_LMDB_VERSION = 2.2.0
|
|
PYTHON_LMDB_SOURCE = lmdb-$(PYTHON_LMDB_VERSION).tar.gz
|
|
PYTHON_LMDB_SITE = https://files.pythonhosted.org/packages/21/44/d94934efaf8f887b6959f131fde740fcaa831edfd13eb5425574637cddd5
|
|
PYTHON_LMDB_LICENSE = OLDAP-2.8
|
|
PYTHON_LMDB_LICENSE_FILES = LICENSE
|
|
PYTHON_LMDB_DEPENDENCIES = host-python-cffi host-python-patch-ng
|
|
PYTHON_LMDB_CPE_ID_VENDOR = py-lmdb_project
|
|
PYTHON_LMDB_CPE_ID_PRODUCT = py-lmdb
|
|
PYTHON_LMDB_SETUP_TYPE = setuptools
|
|
|
|
$(eval $(python-package))
|