[CLSA-2026:1792167030] Fix CVE(s): CVE-2020-10531
Type:
security
Severity:
Important
Release date:
2026-10-16 16:10:42 UTC
Description:
* SECURITY UPDATE: heap buffer overflow from integer overflow in the bundled ICU UnicodeString::doAppend() - debian/patches/CVE-2020-10531.patch: add uprv_add32_overflow() and set the string to bogus instead of appending when the new length overflows int32_t - CVE-2020-10531
CVEs fixed:
Updated packages:
  • mongodb44_4.4.29-1+tuxcare.els19_amd64.deb
    sha:9c6d32286b15c24370eb0e19918cf2cb7d6c60dd
  • mongodb44-mongos_4.4.29-1+tuxcare.els19_amd64.deb
    sha:3833bcb856c447eae052e89f0f8c4ed801018461
  • mongodb44-server_4.4.29-1+tuxcare.els19_amd64.deb
    sha:2bc416c60c38f94f6cf293801de48b007d8936ce
  • mongodb44-shell_4.4.29-1+tuxcare.els19_amd64.deb
    sha:60f9ed9cb261a015ed363649cf19d32aa60ad88c
  • mongodb44_4.4.29-1+tuxcare.els19_arm64.deb
    sha:30898bb317ba7dda9719fc1e63f490eef08cf0da
  • mongodb44-mongos_4.4.29-1+tuxcare.els19_arm64.deb
    sha:9a85bf6668325509191d00f6b43f9fc0a2b16ad6
  • mongodb44-server_4.4.29-1+tuxcare.els19_arm64.deb
    sha:67920c9f8071b66bd84e7ae5c67e3d6697178924
  • mongodb44-shell_4.4.29-1+tuxcare.els19_arm64.deb
    sha:b1c1df8098180c3e46ba6050a151da003e0f4211
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.