Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3d12a7d0 by Salvatore Bonaccorso at 2026-10-09T19:37:02+02:00
Add CVE-2026-106438/mongo-c-driver
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -777,7 +777,10 @@ CVE-2026-106600 (Missing Authorization vulnerability in
Liquid Web / StellarWP G
CVE-2026-106596 (Missing Authorization vulnerability in Visual Composer Visual
Composer ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-106438 (An incorrect calculation in Decimal128 string parsing in the
MongoDB C ...)
- TODO: check
+ - mongo-c-driver 2.5.6-1
+ NOTE: https://jira.mongodb.org/browse/CDRIVER-6419
+ NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/54a7e9f372bd8e1953298b60393b07b042360a87
(2.5.6)
+ NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/12930599bad296e8a42042677478279fd9e903f7
(1.30.13)
CVE-2026-106437 (The BSON buffer-reservation API in the MongoDB C Driver can
record a l ...)
TODO: check
CVE-2026-106436 (The BSON encoder in the MongoDB PHP Driver does not check
some return ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d12a7d056a34abd84fb8ab37f2bf43068840ff3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d12a7d056a34abd84fb8ab37f2bf43068840ff3
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
