[CLSA-2026:1792167935] Fix CVE(s): CVE-2020-10531, CVE-2020-14155
Type:
security
Severity:
Important
Release date:
2026-10-16 16:25:48 UTC
Description:
* SECURITY UPDATE: integer overflow in the bundled PCRE callout number parsing in compile_branch() - debian/patches/CVE-2020-14155.patch: check the number after (?C against 255 inside the digit loop, before it can overflow - CVE-2020-14155
CVEs fixed:
Updated packages:
  • mongodb5_5.0.31-1+tuxcare.els18_amd64.deb
    sha:4531238cada23854cbeaa52d34c2650dd18da6a5
  • mongodb5-mongos_5.0.31-1+tuxcare.els18_amd64.deb
    sha:ea6da844311dea1fb65b6dde13bc1b8061a631b3
  • mongodb5-server_5.0.31-1+tuxcare.els18_amd64.deb
    sha:ae52869edc58190d22b418d9d2c601c9d098e407
  • mongodb5-shell_5.0.31-1+tuxcare.els18_amd64.deb
    sha:8da49dfc381850ba6061fbf5073e541c2fadb9cf
  • mongodb5_5.0.31-1+tuxcare.els18_arm64.deb
    sha:39492bae996954859a80cf31db5aabbcce6c920c
  • mongodb5-mongos_5.0.31-1+tuxcare.els18_arm64.deb
    sha:8b12ab1993e475cfe770bbcdca4779e528f94d79
  • mongodb5-server_5.0.31-1+tuxcare.els18_arm64.deb
    sha:af6ab457858b8fa02c4640b84b2f08129ae93415
  • mongodb5-shell_5.0.31-1+tuxcare.els18_arm64.deb
    sha:f6de11d2f2f263eda59ed4b61565a5af3277570e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.