mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
2286c4a02c
https://github.com/jnwatson/py-lmdb/blob/py-lmdb_2.2.0/ChangeLog Version 2.1.0 fixes the following CVEs: - **CVE-2019-16224**: heap buffer overflow via `MDB_DUPFIXED` without `MDB_DUPSORT` in on-disk `md_flags`. (#429) - **CVE-2019-16225**: `SIGSEGV` from `P_DIRTY` flag set on mmap'd disk pages, causing `mdb_page_touch()` to skip copy-on-write. (#429) - **CVE-2019-16226**: out-of-bounds `memmove` in `mdb_node_del` via corrupt `mn_hi` making `NODEDSZ()` huge. (#429) - **CVE-2019-16227**: NULL pointer dereference of `mc_xcursor` when `F_DUPDATA` is set on a node in a non-DUPSORT database. (#429) - **CVE-2019-16228**: divide-by-zero from zero `mm_psize` in meta page header. (#429) Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
6 lines
318 B
Plaintext
6 lines
318 B
Plaintext
# md5, sha256 from https://pypi.org/pypi/lmdb/json
|
|
md5 f6f491b825302966f63b3fdee2ef80fd lmdb-2.2.0.tar.gz
|
|
sha256 53020e20305c043ea6e68089bc242d744fba6073cdb268332299ba6dda2886d4 lmdb-2.2.0.tar.gz
|
|
# Locally computed sha256 checksums
|
|
sha256 310fe25c858a9515fc8c8d7d1f24a67c9496f84a91e0a0e41ea9975b1371e569 LICENSE
|