summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch31
-rw-r--r--meta-oe/recipes-dbs/lmdb/lmdb_0.9.35.bb (renamed from meta-oe/recipes-dbs/lmdb/lmdb_0.9.31.bb)5
2 files changed, 2 insertions, 34 deletions
diff --git a/meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch b/meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch
deleted file mode 100644
index 6c85b2b8ed..0000000000
--- a/meta-oe/recipes-dbs/lmdb/files/CVE-2026-22185.patch
+++ /dev/null
@@ -1,31 +0,0 @@
1From 94ca20e5aed5d8730e045bb945fa3485b28a7981 Mon Sep 17 00:00:00 2001
2From: Gyorgy Sarvari <skandigraun@gmail.com>
3Date: Tue, 6 Jan 2026 20:52:25 +0000
4Subject: [PATCH] ITS#10421 mdb_load: check for malicious input
5
6From: Howard Chu <hyc@openldap.org>
7
8CVE: CVE-2026-22185
9Upstream-Status: Backport [https://github.com/LMDB/lmdb/commit/8e1fda85532a3c74276df38a42d234dcdfa1e40d]
10Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
11---
12 libraries/liblmdb/mdb_load.c | 6 ++++++
13 1 file changed, 6 insertions(+)
14
15diff --git a/libraries/liblmdb/mdb_load.c b/libraries/liblmdb/mdb_load.c
16index d2a3cec..7eccf40 100644
17--- a/libraries/liblmdb/mdb_load.c
18+++ b/libraries/liblmdb/mdb_load.c
19@@ -208,6 +208,12 @@ badend:
20
21 c1 = buf->mv_data;
22 len = strlen((char *)c1);
23+ if (!len) {
24+ /* This can only happen with an intentionally invalid input
25+ * with a NUL byte after the leading SPACE
26+ */
27+ goto badend;
28+ }
29 l2 = len;
30
31 /* Is buffer too short? */
diff --git a/meta-oe/recipes-dbs/lmdb/lmdb_0.9.31.bb b/meta-oe/recipes-dbs/lmdb/lmdb_0.9.35.bb
index 29bfbb81fa..36f2056914 100644
--- a/meta-oe/recipes-dbs/lmdb/lmdb_0.9.31.bb
+++ b/meta-oe/recipes-dbs/lmdb/lmdb_0.9.35.bb
@@ -8,14 +8,13 @@ HOMEPAGE = "https://symas.com/lightning-memory-mapped-database/"
8LICENSE = "OLDAP-2.8" 8LICENSE = "OLDAP-2.8"
9LIC_FILES_CHKSUM = "file://LICENSE;md5=153d07ef052c4a37a8fac23bc6031972" 9LIC_FILES_CHKSUM = "file://LICENSE;md5=153d07ef052c4a37a8fac23bc6031972"
10 10
11SRC_URI = "git://github.com/LMDB/lmdb.git;nobranch=1;protocol=https \ 11SRC_URI = "git://github.com/LMDB/lmdb.git;nobranch=1;protocol=https;tag=LMDB_${PV} \
12 file://run-ptest \ 12 file://run-ptest \
13 file://0001-Makefile-use-libprefix-instead-of-libdir.patch \ 13 file://0001-Makefile-use-libprefix-instead-of-libdir.patch \
14 file://0001-make-set-soname-on-liblmdb.patch;patchdir=../.. \ 14 file://0001-make-set-soname-on-liblmdb.patch;patchdir=../.. \
15 file://CVE-2026-22185.patch;striplevel=3 \
16 " 15 "
17 16
18SRCREV = "ce201088de95d26fc0da36ba805bf2ddc2ba74ff" 17SRCREV = "69087ced3cb6082f7dcfb4fc2dcaa3b68a7e2e8c"
19 18
20inherit ptest 19inherit ptest
21 20