[CLSA-2026:1792053040] Fix CVE(s): CVE-2020-10531
Type:
security
Severity:
Important
Release date:
2026-10-15 08:30:51 UTC
Description:
* SECURITY UPDATE: heap buffer overflow from integer overflow in the bundled ICU UnicodeString::doAppend() - debian/patches/CVE-2020-10531.patch: add uprv_add32_overflow() and set the string to bogus instead of appending when the new length overflows int32_t - CVE-2020-10531
CVEs fixed:
Updated packages:
  • mongodb42_4.2.25-1+tuxcare.els20_amd64.deb
    sha:98075b1d61780c94997be40bffb9bd2863243b01
  • mongodb42-mongos_4.2.25-1+tuxcare.els20_amd64.deb
    sha:faf288b3e04af85e71752b66dd9dd28c7d13f8c4
  • mongodb42-server_4.2.25-1+tuxcare.els20_amd64.deb
    sha:ca259248dda74b1cce0c41c1739d58228b3a0628
  • mongodb42-shell_4.2.25-1+tuxcare.els20_amd64.deb
    sha:4dfc96f4a02fd8ec087f496307c255b79b22654c
  • mongodb42_4.2.25-1+tuxcare.els20_arm64.deb
    sha:fd74ee2236050a691295a158bbbb0377858f4f27
  • mongodb42-mongos_4.2.25-1+tuxcare.els20_arm64.deb
    sha:eff3a067fcff16cdba587cc8a7c9dc1460f3fe9e
  • mongodb42-server_4.2.25-1+tuxcare.els20_arm64.deb
    sha:5a3d62fb9b7b5c3b828bed532e2c0342f5d41b1a
  • mongodb42-shell_4.2.25-1+tuxcare.els20_arm64.deb
    sha:ed4cfd302ca92d671bce52b27637370fc5cde4b3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.