[CLSA-2026:1792053910] Fix CVE(s): CVE-2020-10531
Type:
security
Severity:
Important
Release date:
2026-10-15 08:45:22 UTC
Description:
* SECURITY UPDATE: heap buffer overflow from integer overflow in the bundled ICU UnicodeString::doAppend() - debian/patches/CVE-2020-10531.patch: add uprv_add32_overflow() and set the string to bogus instead of appending when the new length overflows int32_t - CVE-2020-10531
CVEs fixed:
Updated packages:
  • mongodb42_4.2.25-1+tuxcare.els20_amd64.deb
    sha:98075b1d61780c94997be40bffb9bd2863243b01
  • mongodb42-mongos_4.2.25-1+tuxcare.els20_amd64.deb
    sha:b3f711b7e5c45e7fb81962af64958d5338e296fe
  • mongodb42-server_4.2.25-1+tuxcare.els20_amd64.deb
    sha:85d28ddea52c11feb472802f7e0f70733f16e0a8
  • mongodb42-shell_4.2.25-1+tuxcare.els20_amd64.deb
    sha:6b6dd00eb6ae838505710af8047802f28954c29b
  • mongodb42_4.2.25-1+tuxcare.els20_arm64.deb
    sha:fd74ee2236050a691295a158bbbb0377858f4f27
  • mongodb42-mongos_4.2.25-1+tuxcare.els20_arm64.deb
    sha:c854e6af697a9bb6bb5f15f64bc2bc364fcd9847
  • mongodb42-server_4.2.25-1+tuxcare.els20_arm64.deb
    sha:80ee8749ac322dd63bbbd3aee599d16c8ba81dfc
  • mongodb42-shell_4.2.25-1+tuxcare.els20_arm64.deb
    sha:c58d8b0010d5cf3a6510d8888513b8748e14b8b8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.