[CLSA-2026:1793629266] Fix CVE(s): CVE-2018-20573, CVE-2018-20574, CVE-2019-6285, CVE-2019-6292

Type:

security

Severity:

Moderate

Release date:

2026-11-02 14:21:19 UTC

Description:

   * SECURITY UPDATE: uncontrolled recursion in the bundled yaml-cpp parser
     - debian/patches/CVE-2018-20573.patch: limit the nesting depth in
       SingleDocParser::HandleNode() with a DepthGuard
     - CVE-2018-20573
     - CVE-2018-20574
     - CVE-2019-6285
     - CVE-2019-6292

CVEs fixed:

Updated packages:

mongodb44_4.4.29-1+tuxcare.els21_amd64.deb
sha:07cef4ed733445aad09bfd2dc5f9f2039ef10dfc
mongodb44-mongos_4.4.29-1+tuxcare.els21_amd64.deb
sha:63ee336f09e4225183a8a2a20fb52948fcd97c1a
mongodb44-server_4.4.29-1+tuxcare.els21_amd64.deb
sha:d4b8963aa74e8f73b9268c465316d2873472c804
mongodb44-shell_4.4.29-1+tuxcare.els21_amd64.deb
sha:66d7a035d1d532052664ef99789abb59c7667866
mongodb44_4.4.29-1+tuxcare.els21_arm64.deb
sha:29cd02418968576a4b552351dc2b2254d791a4fe
mongodb44-mongos_4.4.29-1+tuxcare.els21_arm64.deb
sha:672c245783d6bbb24f294f52ec5cf0a4880937f9
mongodb44-server_4.4.29-1+tuxcare.els21_arm64.deb
sha:2beebb5b9a3b4f0e1327fa8a0f5fd16c9169b50e
mongodb44-shell_4.4.29-1+tuxcare.els21_arm64.deb
sha:86eb6356dc45a4d1b5263469dd20b0220ad9f0d3

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.