Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4ba05a4e by Salvatore Bonaccorso at 2026-09-24T21:05:36+02:00
Track fixed version for CVE-2026-93393/mongo-c-driver
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5808,7 +5808,7 @@ CVE-2026-93394 (A flaw in libmongoc's SCRAM
authentication implementation caused
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/6b27da3e0384170ac0efc75321556bd37a2ae03f
(2.4.0)
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/0b9bbbff0b949dcddb97e518e7fdb5950e187be3
(1.30.11)
CVE-2026-93393 (A heap-based buffer overflow exists in the TLS transport layer
of the ...)
- - mongo-c-driver <unfixed> (bug #1148331; unimportant)
+ - mongo-c-driver 2.5.5-1 (bug #1148331; unimportant)
NOTE: https://jira.mongodb.org/browse/CDRIVER-6417
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/5536089200aeb837f27f39465d89506eeff689e1
(2.5.4)
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/01b1cf32fbe78044676c2fb163ba4f561a8d3ee3
(1.30.11)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ba05a4e683ddad17114e99103a6d087a365936b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4ba05a4e683ddad17114e99103a6d087a365936b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
