Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
718f4368 by Salvatore Bonaccorso at 2026-10-09T20:23:31+02:00
Add CVE-2026-106437/mongo-c-driver
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -786,7 +786,10 @@ CVE-2026-106438 (An incorrect calculation in Decimal128
string parsing in the Mo
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/54a7e9f372bd8e1953298b60393b07b042360a87
(2.5.6)
NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/12930599bad296e8a42042677478279fd9e903f7
(1.30.13)
CVE-2026-106437 (The BSON buffer-reservation API in the MongoDB C Driver can
record a l ...)
- TODO: check
+ - mongo-c-driver 2.5.6-1
+ NOTE: https://jira.mongodb.org/browse/CDRIVER-6423
+ NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/6c593a59a9dce87e42298b85779ca02a9357dd74
(2.5.6)
+ NOTE: Fixed by:
https://github.com/mongodb/mongo-c-driver/commit/b7f1f5742351741c068020196fd88f196551aad2
(1.30.13)
CVE-2026-106436 (The BSON encoder in the MongoDB PHP Driver does not check
some return ...)
TODO: check
CVE-2026-106435 (The MongoDB Python Driver's binary accelerator can read
outside a buff ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/718f4368f8bcabcb591e0ca7a033fbb1bd851a9a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/718f4368f8bcabcb591e0ca7a033fbb1bd851a9a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
