Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0ed721d1 by Salvatore Bonaccorso at 2026-10-01T10:18:13+02:00
Track fixed version for php-mongodb issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7443,7 +7443,7 @@ CVE-2026-96746 (An out-of-bounds write in the
connection-monitoring logic of the
NOTE:
https://github.com/mongodb/mongo-c-driver/commit/52352bfdea96506fafe0f53e222a1f61eebe54f2
(2.5.5)
NOTE:
https://github.com/mongodb/mongo-c-driver/commit/59bcc756ad8f04af74b84b88ab747adfd2647b5b
(1.30.12)
CVE-2026-96745 (Deserialization of untrusted data in the command monitoring
support of ...)
- - php-mongodb <unfixed> (bug #1148966)
+ - php-mongodb 2.5.3-1 (bug #1148966)
[trixie] - php-mongodb <no-dsa> (Minor issue)
NOTE:
https://github.com/mongodb/mongo-php-driver/security/advisories/GHSA-cmvj-vxvq-rh2c
NOTE: https://jira.mongodb.org/browse/PHPC-2743
@@ -37681,7 +37681,7 @@ CVE-2026-84969 (A memory-handling error in the
BSON-to-JSON conversion helpers o
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/08d0cfaaf08a54d7e87a5e5fa8d38251bf0eeca6
(1.30.9)
NOTE: Introduced by:
https://github.com/mongodb/mongo-c-driver/commit/f2c1bb7989177fa2ddba1a915e8423e46ee1defe
(1.30.0)
CVE-2026-84968 (An out-of-bounds read in the BSON decoding component of the
MongoDB PH ...)
- - php-mongodb <unfixed> (bug #1149050)
+ - php-mongodb 2.5.3-1 (bug #1149050)
[trixie] - php-mongodb <no-dsa> (Minor issue)
[bookworm] - php-mongodb <postponed> (Minor issue, infoleak)
NOTE: https://jira.mongodb.org/browse/PHPC-2744
@@ -140402,7 +140402,7 @@ CVE-2026-8596 (Cleartext storage of sensitive
information in the ModelBuilder/Se
CVE-2026-7373 (Rapid7 Metasploit Pro is vulnerable to a local privilege
escalation at ...)
NOT-FOR-US: Rapid7 Metasploit Pro
CVE-2026-6811 (Stack exhaustion vulnerability in the MongoDB PHP driver can
cause app ...)
- - php-mongodb <unfixed> (bug #1136802)
+ - php-mongodb 2.5.3-1 (bug #1136802)
[trixie] - php-mongodb <no-dsa> (Minor issue)
[bookworm] - php-mongodb <no-dsa> (Minor issue)
[bullseye] - php-mongodb <postponed> (Minor issue, DoS in unusual
circumstances)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ed721d122b9f618f9eef5b3f914444606f5dba8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0ed721d122b9f618f9eef5b3f914444606f5dba8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
