[Git][security-tracker-team/security-tracker][master] update notes (closing commits) on mongo-c-driver CVEs

[Roberto C. Sánchez (@roberto)]

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7cda1635 by Roberto C. Sánchez at 2026-10-30T16:55:27-04:00
update notes (closing commits) on mongo-c-driver CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -60534,6 +60534,7 @@ CVE-2026-93394 (A flaw in libmongoc's SCRAM authentication implementation caused
 	[trixie] - mongo-c-driver <no-dsa> (Minor issue)
 	NOTE: https://jira.mongodb.org/browse/CDRIVER-6315
 	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/6b27da3e0384170ac0efc75321556bd37a2ae03f (2.4.0)
+	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/591d0a5e1f5743b4424c921409be3278201cd26f (2.3.3)
 	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/0b9bbbff0b949dcddb97e518e7fdb5950e187be3 (1.30.11)
 CVE-2026-93393 (A heap-based buffer overflow exists in the TLS transport layer of the  ...)
 	- mongo-c-driver 2.5.5-1 (bug #1148331; unimportant)
@@ -84206,10 +84207,14 @@ CVE-2026-84964 (A double free in the OpenSSL-based TLS certificate revocation ch
 	- mongo-c-driver 2.5.2-1
 	[trixie] - mongo-c-driver <no-dsa> (Minor issue)
 	NOTE: https://jira.mongodb.org/browse/CDRIVER-6409
+	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/676d0d0fb0e7b5970a3e1cd97db9e25aa88826d9 (2.5.2)
+	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/7e4c66515a46abaf2f488ed0fe5a5c21887b6e1d (1.30.9)
 CVE-2026-84963 (An incorrect numeric conversion in the JSON parsing component of the M ...)
 	- mongo-c-driver 2.5.2-1
 	[trixie] - mongo-c-driver <no-dsa> (Minor issue)
 	NOTE: https://jira.mongodb.org/browse/CDRIVER-6407
+	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/1ce6c28a1a73c811837b9e9acd68e1a6daf4e798 (2.5.2)
+	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/16c91b9ab9ab4f917ef64c7a16947025a872434d (1.30.9)
 CVE-2026-84962 (An unauthorized user with key vault write access may cause an authoriz ...)
 	- libmongocrypt 1.20.2-1
 	[trixie] - libmongocrypt <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cda163547238f022fe5a4a9658b1a239386095f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cda163547238f022fe5a4a9658b1a239386095f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/e25b9bd5/attachment-0001.htm>