diff options
| author | Liu Yiding <liuyd.fnst@fujitsu.com> | 2026-02-10 16:11:57 +0800 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2026-02-10 21:11:45 -0800 |
| commit | bc6370efb6616d0673175f316df29bf18f3723be (patch) | |
| tree | 3a48bbcd8c5d33d2c35c589a996402b59bd1a58d /meta-oe | |
| parent | 48dc68c36699583c2d7e4521464e8dce4c31bbba (diff) | |
| download | meta-openembedded-bc6370efb6616d0673175f316df29bf18f3723be.tar.gz | |
lmdb: upgrade 0.9.31 -> 0.9.35
Drop CVE-2026-22185.patch as it was merged upstream
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-oe')
| -rw-r--r-- | meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch | 31 | ||||
| -rw-r--r-- | meta-oe/recipes-dbs/lmdb/lmdb_0.9.35.bb (renamed from meta-oe/recipes-dbs/lmdb/lmdb_0.9.31.bb) | 5 |
2 files changed, 2 insertions, 34 deletions
diff --git a/meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch b/meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch deleted file mode 100644 index 6c85b2b8ed..0000000000 --- a/meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch +++ /dev/null | |||
| @@ -1,31 +0,0 @@ | |||
| 1 | From 94ca20e5aed5d8730e045bb945fa3485b28a7981 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Gyorgy Sarvari <skandigraun@gmail.com> | ||
| 3 | Date: Tue, 6 Jan 2026 20:52:25 +0000 | ||
| 4 | Subject: [PATCH] ITS#10421 mdb_load: check for malicious input | ||
| 5 | |||
| 6 | From: Howard Chu <hyc@openldap.org> | ||
| 7 | |||
| 8 | CVE: CVE-2026-22185 | ||
| 9 | Upstream-Status: Backport [https://github.com/LMDB/lmdb/commit/8e1fda85532a3c74276df38a42d234dcdfa1e40d] | ||
| 10 | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> | ||
| 11 | --- | ||
| 12 | libraries/liblmdb/mdb_load.c | 6 ++++++ | ||
| 13 | 1 file changed, 6 insertions(+) | ||
| 14 | |||
| 15 | diff --git a/libraries/liblmdb/mdb_load.c b/libraries/liblmdb/mdb_load.c | ||
| 16 | index d2a3cec..7eccf40 100644 | ||
| 17 | --- a/libraries/liblmdb/mdb_load.c | ||
| 18 | +++ b/libraries/liblmdb/mdb_load.c | ||
| 19 | @@ -208,6 +208,12 @@ badend: | ||
| 20 | |||
| 21 | c1 = buf->mv_data; | ||
| 22 | len = strlen((char *)c1); | ||
| 23 | + if (!len) { | ||
| 24 | + /* This can only happen with an intentionally invalid input | ||
| 25 | + * with a NUL byte after the leading SPACE | ||
| 26 | + */ | ||
| 27 | + goto badend; | ||
| 28 | + } | ||
| 29 | l2 = len; | ||
| 30 | |||
| 31 | /* Is buffer too short? */ | ||
diff --git a/meta-oe/recipes-dbs/lmdb/lmdb_0.9.31.bb b/meta-oe/recipes-dbs/lmdb/lmdb_0.9.35.bb index 29bfbb81fa..36f2056914 100644 --- a/meta-oe/recipes-dbs/lmdb/lmdb_0.9.31.bb +++ b/meta-oe/recipes-dbs/lmdb/lmdb_0.9.35.bb | |||
| @@ -8,14 +8,13 @@ HOMEPAGE = "https://symas.com/lightning-memory-mapped-database/" | |||
| 8 | LICENSE = "OLDAP-2.8" | 8 | LICENSE = "OLDAP-2.8" |
| 9 | LIC_FILES_CHKSUM = "file://LICENSE;md5=153d07ef052c4a37a8fac23bc6031972" | 9 | LIC_FILES_CHKSUM = "file://LICENSE;md5=153d07ef052c4a37a8fac23bc6031972" |
| 10 | 10 | ||
| 11 | SRC_URI = "git://github.com/LMDB/lmdb.git;nobranch=1;protocol=https \ | 11 | SRC_URI = "git://github.com/LMDB/lmdb.git;nobranch=1;protocol=https;tag=LMDB_${PV} \ |
| 12 | file://run-ptest \ | 12 | file://run-ptest \ |
| 13 | file://0001-Makefile-use-libprefix-instead-of-libdir.patch \ | 13 | file://0001-Makefile-use-libprefix-instead-of-libdir.patch \ |
| 14 | file://0001-make-set-soname-on-liblmdb.patch;patchdir=../.. \ | 14 | file://0001-make-set-soname-on-liblmdb.patch;patchdir=../.. \ |
| 15 | file://CVE-2026-22185.patch;striplevel=3 \ | ||
| 16 | " | 15 | " |
| 17 | 16 | ||
| 18 | SRCREV = "ce201088de95d26fc0da36ba805bf2ddc2ba74ff" | 17 | SRCREV = "69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c" |
| 19 | 18 | ||
| 20 | inherit ptest | 19 | inherit ptest |
| 21 | 20 | ||
