[Git][security-tracker-team/security-tracker][master] Add CVE-2026-120678/mongo-c-driver

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c4e1ec18 by Salvatore Bonaccorso at 2026-11-04T11:49:13+01:00
Add CVE-2026-120678/mongo-c-driver

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -725,7 +725,10 @@ CVE-2026-120715 (Server-side request forgery in the Active Directory credential
 CVE-2026-120684 (A memory-initialization flaw in the legacy GridFS file handling of the ...)
 	TODO: check
 CVE-2026-120678 (A memory management flaw in the MongoDB C Driver's handling of compres ...)
-	TODO: check
+	- mongo-c-driver 2.5.8-1
+	NOTE: https://jira.mongodb.org/browse/CDRIVER-6521
+	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/e4394fb21880d360ab6b36855353a455d2127a2f (2.5.8)
+	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/40733d2100cbed890008042e8bb8ab80c8f9249f (1.30.15)
 CVE-2026-120673 (A component of the MongoDB Rust Driver that records diagnostic tracing ...)
 	TODO: check
 CVE-2026-120567 (The MongoDB Entity Framework Core provider does not neutralize special ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c4e1ec185eaf98b4561e63e43f823fd697a1cee9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c4e1ec185eaf98b4561e63e43f823fd697a1cee9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/3bda4883/attachment.htm>