[Git][security-tracker-team/security-tracker][master] Add CVE-2026-84968/php-mongodb

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
608f9a17 by Salvatore Bonaccorso at 2026-09-04T10:50:39+02:00
Add CVE-2026-84968/php-mongodb

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -560,7 +560,9 @@ CVE-2026-84969 (A memory-handling error in the BSON-to-JSON conversion helpers o
 	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/4229afa3bb4d0842edd5ee8da0f5143bd563e0bd (2.5.2)
 	NOTE: Fixed by: https://github.com/mongodb/mongo-c-driver/commit/08d0cfaaf08a54d7e87a5e5fa8d38251bf0eeca6 (1.30.9)
 CVE-2026-84968 (An out-of-bounds read in the BSON decoding component of the MongoDB PH ...)
-	TODO: check
+	- php-mongodb <unfixed>
+	NOTE: https://jira.mongodb.org/browse/PHPC-2744
+	NOTE: Fixed by: https://github.com/mongodb/mongo-php-driver/commit/44f68614e0a859a0d880811e3f93c2a02330c565 (2.5.1)
 CVE-2026-84967 (A component of the MongoDB extension for Visual Studio Code does not n ...)
 	NOT-FOR-US: MongoDB extension for Visual Studio Code
 CVE-2026-84966 (An incorrect numeric type conversion in the BSON document building com ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/608f9a17e9b40c6c3ac1a478c5b64c36fcea3f64

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/608f9a17e9b40c6c3ac1a478c5b64c36fcea3f64
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260904/d2c43135/attachment.htm>