[CLSA-2026:1792168229] Fix CVE(s): CVE-2020-10531, CVE-2020-14155
Type:
security
Severity:
Important
Release date:
2026-10-16 16:30:40 UTC
Description:
* SECURITY UPDATE: integer overflow in the bundled PCRE callout number parsing in compile_branch() - debian/patches/CVE-2020-14155.patch: check the number after (?C against 255 inside the digit loop, before it can overflow - CVE-2020-14155
CVEs fixed:
Updated packages:
  • mongodb5_5.0.31-1+tuxcare.els18_amd64.deb
    sha:4531238cada23854cbeaa52d34c2650dd18da6a5
  • mongodb5-mongos_5.0.31-1+tuxcare.els18_amd64.deb
    sha:482fd8ab14a6498fc0ba4590df78acca431628c5
  • mongodb5-server_5.0.31-1+tuxcare.els18_amd64.deb
    sha:bd25f37ff32ec58ac32c2870f3b8fb19aa43f281
  • mongodb5-shell_5.0.31-1+tuxcare.els18_amd64.deb
    sha:d8d283aa65a55366c9dcb99566f45505eb4a1f39
  • mongodb5_5.0.31-1+tuxcare.els18_arm64.deb
    sha:39492bae996954859a80cf31db5aabbcce6c920c
  • mongodb5-mongos_5.0.31-1+tuxcare.els18_arm64.deb
    sha:44d3395d758d3f6ecd61accc797c6dd807688733
  • mongodb5-server_5.0.31-1+tuxcare.els18_arm64.deb
    sha:7400204859f38b5b632bbb6cc43e01a84cecabd5
  • mongodb5-shell_5.0.31-1+tuxcare.els18_arm64.deb
    sha:5ecdb02a618909dccb52f0689ff071a77552e042
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.