[Git][security-tracker-team/security-tracker][master] Reassess py-lmdb/lmdb issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
64b16492 by Salvatore Bonaccorso at 2026-07-02T23:00:45+02:00
Reassess py-lmdb/lmdb issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -636974,38 +636974,38 @@ CVE-2019-16229 (drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5
 	NOTE: Requires memory allocation failure during device probe, so unlikely to
 	NOTE: be exploitable, and then it's only a local DoS.
 CVE-2019-16228 (An issue was discovered in py-lmdb 0.97. There is a divide-by-zero err ...)
-	- py-lmdb <unfixed> (bug #1132719)
-	[trixie] - py-lmdb <no-dsa> (Minor issue)
-	[bookworm] - py-lmdb <no-dsa> (Minor issue)
-	[bullseye] - py-lmdb <postponed> (Minor issue, no rdeps)
+	- lmdb <unfixed> (bug #1141312)
+	[trixie] - lmdb <no-dsa> (Minor issue)
+	- py-lmdb <unfixed> (bug #1132719; unimportant)
+	NOTE: src:py-lmdb uses system version of liblmdb
 	NOTE: https://github.com/jnwatson/py-lmdb/issues/210
 	NOTE: https://github.com/jnwatson/py-lmdb/pull/429
 CVE-2019-16227 (An issue was discovered in py-lmdb 0.97. For certain values of mn_flag ...)
-	- py-lmdb <unfixed> (bug #1132719)
-	[trixie] - py-lmdb <no-dsa> (Minor issue)
-	[bookworm] - py-lmdb <no-dsa> (Minor issue)
-	[bullseye] - py-lmdb <postponed> (Minor issue, no rdeps)
+	- lmdb <unfixed> (bug #1141312)
+	[trixie] - lmdb <no-dsa> (Minor issue)
+	- py-lmdb <unfixed> (bug #1132719; unimportant)
+	NOTE: src:py-lmdb uses system version of liblmdb
 	NOTE: https://github.com/jnwatson/py-lmdb/issues/210
 	NOTE: https://github.com/jnwatson/py-lmdb/pull/429
 CVE-2019-16226 (An issue was discovered in py-lmdb 0.97. mdb_node_del does not validat ...)
-	- py-lmdb <unfixed> (bug #1132719)
-	[trixie] - py-lmdb <no-dsa> (Minor issue)
-	[bookworm] - py-lmdb <no-dsa> (Minor issue)
-	[bullseye] - py-lmdb <postponed> (Minor issue, no rdeps)
+	- lmdb <unfixed> (bug #1141312)
+	[trixie] - lmdb <no-dsa> (Minor issue)
+	- py-lmdb <unfixed> (bug #1132719; unimportant)
+	NOTE: src:py-lmdb uses system version of liblmdb
 	NOTE: https://github.com/jnwatson/py-lmdb/issues/210
 	NOTE: https://github.com/jnwatson/py-lmdb/pull/429
 CVE-2019-16225 (An issue was discovered in py-lmdb 0.97. For certain values of mp_flag ...)
-	- py-lmdb <unfixed> (bug #1132719)
-	[trixie] - py-lmdb <no-dsa> (Minor issue)
-	[bookworm] - py-lmdb <no-dsa> (Minor issue)
-	[bullseye] - py-lmdb <postponed> (Minor issue, no rdeps)
+	- lmdb <unfixed> (bug #1141312)
+	[trixie] - lmdb <no-dsa> (Minor issue)
+	- py-lmdb <unfixed> (bug #1132719; unimportant)
+	NOTE: src:py-lmdb uses system version of liblmdb
 	NOTE: https://github.com/jnwatson/py-lmdb/issues/210
 	NOTE: https://github.com/jnwatson/py-lmdb/pull/429
 CVE-2019-16224 (An issue was discovered in py-lmdb 0.97. For certain values of md_flag ...)
-	- py-lmdb <unfixed> (bug #1132719)
-	[trixie] - py-lmdb <no-dsa> (Minor issue)
-	[bookworm] - py-lmdb <no-dsa> (Minor issue)
-	[bullseye] - py-lmdb <postponed> (Minor issue, no rdeps)
+	- lmdb <unfixed> (bug #1141312)
+	[trixie] - lmdb <no-dsa> (Minor issue)
+	- py-lmdb <unfixed> (bug #1132719; unimportant)
+	NOTE: src:py-lmdb uses system version of liblmdb
 	NOTE: https://github.com/jnwatson/py-lmdb/issues/210
 	NOTE: https://github.com/jnwatson/py-lmdb/pull/429
 CVE-2019-16223 (WordPress before 5.2.3 allows XSS in post previews by authenticated us ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/64b164927fca4b27eb135003967d0f72f10f0c4e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/64b164927fca4b27eb135003967d0f72f10f0c4e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260702/afcc14c7/attachment.htm>