summaryrefslogtreecommitdiffstats
path: root/meta-oe
diff options
context:
space:
mode:
authorLiu Yiding <liuyd.fnst@fujitsu.com>2026-02-10 16:11:57 +0800
committerKhem Raj <raj.khem@gmail.com>2026-02-10 21:11:45 -0800
commitbc6370efb6616d0673175f316df29bf18f3723be (patch)
tree3a48bbcd8c5d33d2c35c589a996402b59bd1a58d /meta-oe
parent48dc68c36699583c2d7e4521464e8dce4c31bbba (diff)
downloadmeta-openembedded-bc6370efb6616d0673175f316df29bf18f3723be.tar.gz
lmdb: upgrade 0.9.31 -> 0.9.35
Drop CVE-2026-22185.patch as it was merged upstream Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-oe')
-rw-r--r--meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch31
-rw-r--r--meta-oe/recipes-dbs/lmdb/lmdb_0.9.35.bb (renamed from meta-oe/recipes-dbs/lmdb/lmdb_0.9.31.bb)5
2 files changed, 2 insertions, 34 deletions
diff --git a/meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch b/meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch
deleted file mode 100644
index 6c85b2b8ed..0000000000
--- a/meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch
+++ /dev/null
@@ -1,31 +0,0 @@
1From 94ca20e5aed5d8730e045bb945fa3485b28a7981 Mon Sep 17 00:00:00 2001
2From: Gyorgy Sarvari <skandigraun@gmail.com>
3Date: Tue, 6 Jan 2026 20:52:25 +0000
4Subject: [PATCH] ITS#10421 mdb_load: check for malicious input
5
6From: Howard Chu <hyc@openldap.org>
7
8CVE: CVE-2026-22185
9Upstream-Status: Backport [https://github.com/LMDB/lmdb/commit/8e1fda85532a3c74276df38a42d234dcdfa1e40d]
10Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
11---
12 libraries/liblmdb/mdb_load.c | 6 ++++++
13 1 file changed, 6 insertions(+)
14
15diff --git a/libraries/liblmdb/mdb_load.c b/libraries/liblmdb/mdb_load.c
16index d2a3cec..7eccf40 100644
17--- a/libraries/liblmdb/mdb_load.c
18+++ b/libraries/liblmdb/mdb_load.c
19@@ -208,6 +208,12 @@ badend:
20
21 c1 = buf->mv_data;
22 len = strlen((char *)c1);
23+ if (!len) {
24+ /* This can only happen with an intentionally invalid input
25+ * with a NUL byte after the leading SPACE
26+ */
27+ goto badend;
28+ }
29 l2 = len;
30
31 /* Is buffer too short? */
diff --git a/meta-oe/recipes-dbs/lmdb/lmdb_0.9.31.bb b/meta-oe/recipes-dbs/lmdb/lmdb_0.9.35.bb
index 29bfbb81fa..36f2056914 100644
--- a/meta-oe/recipes-dbs/lmdb/lmdb_0.9.31.bb
+++ b/meta-oe/recipes-dbs/lmdb/lmdb_0.9.35.bb
@@ -8,14 +8,13 @@ HOMEPAGE = "https://symas.com/lightning-memory-mapped-database/"
8LICENSE = "OLDAP-2.8" 8LICENSE = "OLDAP-2.8"
9LIC_FILES_CHKSUM = "file://LICENSE;md5=153d07ef052c4a37a8fac23bc6031972" 9LIC_FILES_CHKSUM = "file://LICENSE;md5=153d07ef052c4a37a8fac23bc6031972"
10 10
11SRC_URI = "git://github.com/LMDB/lmdb.git;nobranch=1;protocol=https \ 11SRC_URI = "git://github.com/LMDB/lmdb.git;nobranch=1;protocol=https;tag=LMDB_${PV} \
12 file://run-ptest \ 12 file://run-ptest \
13 file://0001-Makefile-use-libprefix-instead-of-libdir.patch \ 13 file://0001-Makefile-use-libprefix-instead-of-libdir.patch \
14 file://0001-make-set-soname-on-liblmdb.patch;patchdir=../.. \ 14 file://0001-make-set-soname-on-liblmdb.patch;patchdir=../.. \
15 file://CVE-2026-22185.patch;striplevel=3 \
16 " 15 "
17 16
18SRCREV = "ce201088de95d26fc0da36ba805bf2ddc2ba74ff" 17SRCREV = "69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c"
19 18
20inherit ptest 19inherit ptest
21 20