Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
1e5851b0 by Salvatore Bonaccorso at 2026-09-18T10:31:04+02:00
Add two more mongo-c-driver issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -34,9 +34,14 @@ CVE-2026-93395 (A missing lower-bound validation in the
bson_new_from_buffer() f
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/c9cfa4cb3b7e7af27a96c25c86ac39f86a16b90c
(2.4.0)
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/cb88248de50c0bca20a4a7bbb91108afe2dbc988
(1.30.11)
CVE-2026-93394 (A flaw in libmongoc's SCRAM authentication implementation
caused the c ...)
- TODO: check
+ - mongo-c-driver 2.4.0-1
+ NOTE: https://jira.mongodb.org/browse/CDRIVER-6315
+ NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/6b27da3e0384170ac0efc75321556bd37a2ae03f
(2.4.0)
+ NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/0b9bbbff0b949dcddb97e518e7fdb5950e187be3
(1.30.11)
CVE-2026-93393 (A heap-based buffer overflow exists in the TLS transport layer
of the ...)
- TODO: check
+ - mongo-c-driver <unfixed>
+ NOTE: https://jira.mongodb.org/browse/CDRIVER-6417
+ TODO: check details, upstream issue not public and no commit reference
CDRIVER-6417
CVE-2026-93387 (Improper state validation in Skia in Google Chrome prior to
153.0.8010 ...)
TODO: check
CVE-2026-93386 (UI misrepresentation in WebAppInstalls in Google Chrome prior
to 153.0 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1e5851b044e9ce5c0970ac6db527c8ec9fee5d3b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1e5851b044e9ce5c0970ac6db527c8ec9fee5d3b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
