Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c54b7d36 by Salvatore Bonaccorso at 2026-09-18T20:40:39+02:00
Update status for CVE-2026-93393/mongo-c-driver
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -59,7 +59,8 @@ CVE-2026-93394 (A flaw in libmongoc's SCRAM authentication
implementation caused
CVE-2026-93393 (A heap-based buffer overflow exists in the TLS transport layer
of the ...)
- mongo-c-driver <unfixed>
NOTE: https://jira.mongodb.org/browse/CDRIVER-6417
- TODO: check details, upstream issue not public and no commit reference
CDRIVER-6417
+ NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/5536089200aeb837f27f39465d89506eeff689e1
(2.5.4)
+ NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/01b1cf32fbe78044676c2fb163ba4f561a8d3ee3
(1.30.11)
CVE-2026-93387 (Improper state validation in Skia in Google Chrome prior to
153.0.8010 ...)
- chromium <unfixed>
CVE-2026-93386 (UI misrepresentation in WebAppInstalls in Google Chrome prior
to 153.0 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c54b7d36cb7ba95bf761d5c2d2276284a645a9ce
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c54b7d36cb7ba95bf761d5c2d2276284a645a9ce
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
