Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
edd5b100 by Salvatore Bonaccorso at 2026-09-12T21:07:54+02:00
Mark mongo-c-driver issues as no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2698,11 +2698,13 @@ CVE-2026-88038 (cookies is a Node.js library for
reading and writing HTTP cookie
NOTE: Fixed by:
https://github.com/pillarjs/cookies/commit/edf9512022d710dea2a1acca2dc215fa9ff7900c
(v0.9.2)
CVE-2026-88036 (Improper neutralization of special elements in data query
logic in the ...)
- mongo-c-driver 2.5.3-1
+ [trixie] - mongo-c-driver <no-dsa> (Minor issue)
NOTE: https://jira.mongodb.org/browse/CDRIVER-6427
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/6b50646296da30aa7ef155feb5f238e59328730e
(2.5.3)
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/6197ab3d7a24f3323a2cf297aae81c7cec96264b
(1.3.10)
CVE-2026-88035 (A size check in the client-side authentication path of the
MongoDB C D ...)
- mongo-c-driver 2.5.3-1
+ [trixie] - mongo-c-driver <no-dsa> (Minor issue)
NOTE: https://jira.mongodb.org/browse/CDRIVER-6416
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/ddfe9e5fe9e3e43ce8f3b1429cacc872767ee2ba
(2.5.3)
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/01245bbd8888946ec54c8faadcb5f40670592d26
(1.3.10)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/edd5b100b26ab47f9b1ceae6e734297a885e88d8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/edd5b100b26ab47f9b1ceae6e734297a885e88d8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
