mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
2286c4a02c
https://github.com/jnwatson/py-lmdb/blob/py-lmdb_2.2.0/ChangeLog Version 2.1.0 fixes the following CVEs: - **CVE-2019-16224**: heap buffer overflow via `MDB_DUPFIXED` without `MDB_DUPSORT` in on-disk `md_flags`. (#429) - **CVE-2019-16225**: `SIGSEGV` from `P_DIRTY` flag set on mmap'd disk pages, causing `mdb_page_touch()` to skip copy-on-write. (#429) - **CVE-2019-16226**: out-of-bounds `memmove` in `mdb_node_del` via corrupt `mn_hi` making `NODEDSZ()` huge. (#429) - **CVE-2019-16227**: NULL pointer dereference of `mc_xcursor` when `F_DUPDATA` is set on a node in a non-DUPSORT database. (#429) - **CVE-2019-16228**: divide-by-zero from zero `mm_psize` in meta page header. (#429) Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
18 lines
668 B
Makefile
18 lines
668 B
Makefile
################################################################################
|
|
#
|
|
# python-lmdb
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_LMDB_VERSION = 2.2.0
|
|
PYTHON_LMDB_SOURCE = lmdb-$(PYTHON_LMDB_VERSION).tar.gz
|
|
PYTHON_LMDB_SITE = https://files.pythonhosted.org/packages/21/44/d94934efaf8f887b6959f131fde740fcaa831edfd13eb5425574637cddd5
|
|
PYTHON_LMDB_LICENSE = OLDAP-2.8
|
|
PYTHON_LMDB_LICENSE_FILES = LICENSE
|
|
PYTHON_LMDB_DEPENDENCIES = host-python-cffi host-python-patch-ng
|
|
PYTHON_LMDB_CPE_ID_VENDOR = py-lmdb_project
|
|
PYTHON_LMDB_CPE_ID_PRODUCT = py-lmdb
|
|
PYTHON_LMDB_SETUP_TYPE = setuptools
|
|
|
|
$(eval $(python-package))
|