[Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-12119/mongo-c-driver

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2d19ea00 by Salvatore Bonaccorso at 2025-11-25T22:49:59+01:00
Update status for CVE-2025-12119/mongo-c-driver

Thanks: Roberto C. Sanchez for confirming correctness on the pull
request.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1489,7 +1489,7 @@ CVE-2025-12119 (A mongoc_bulk_operation_t may read invalid memory if large optio
 	- mongo-c-driver 2.1.2-1
 	[trixie] - mongo-c-driver <no-dsa> (Minor issue)
 	[bookworm] - mongo-c-driver <no-dsa> (Minor issue)
-	TODO: research exact commit, possibly https://github.com/mongodb/mongo-c-driver/pull/2132, asked maintainer
+	NOTE: https://github.com/mongodb/mongo-c-driver/pull/2132
 CVE-2025-12057 (The WavePlayer WordPress plugin before 3.8.0 does not have authorizati ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-12056 (Out-of-bounds Read in Shelly Pro 3EM(before v1.4.4) allows Overread Bu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2d19ea00d4fcf04d1063f9c29604d02e0b0a7a66

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2d19ea00d4fcf04d1063f9c29604d02e0b0a7a66
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251125/8e42c334/attachment.htm>