[CLSA-2026:1793629423] Fix CVE(s): CVE-2018-20573, CVE-2018-20574, CVE-2019-6285, CVE-2019-6292

Type:

security

Severity:

Moderate

Release date:

2026-11-02 14:23:56 UTC

Description:

   * SECURITY UPDATE: uncontrolled recursion in the bundled yaml-cpp parser
     - debian/patches/CVE-2018-20573.patch: limit the nesting depth in
       SingleDocParser::HandleNode() with a DepthGuard
     - CVE-2018-20573
     - CVE-2018-20574
     - CVE-2019-6285
     - CVE-2019-6292

CVEs fixed:

Updated packages:

mongodb42_4.2.25-1+tuxcare.els22_amd64.deb
sha:3c70ce9b05ebad6e396e9c1131ef6d11b148400d
mongodb42-mongos_4.2.25-1+tuxcare.els22_amd64.deb
sha:0d47f464ed7bc9b5f6acbd4cef1e02e9cdde2616
mongodb42-server_4.2.25-1+tuxcare.els22_amd64.deb
sha:d116f4037e1caa516eaeace67333a721640eae30
mongodb42-shell_4.2.25-1+tuxcare.els22_amd64.deb
sha:d4893f87be9b7c69a53a91f0ca93bcbb76f58c89
mongodb42_4.2.25-1+tuxcare.els22_arm64.deb
sha:c6f32be60b99f13430994c235790b3d7fa2648e3
mongodb42-mongos_4.2.25-1+tuxcare.els22_arm64.deb
sha:ef02a008ca1d44fd29802e7717a1fbfa9d3aa776
mongodb42-server_4.2.25-1+tuxcare.els22_arm64.deb
sha:a04ab8673aedfa165d6fa31c27dcedd526915ca1
mongodb42-shell_4.2.25-1+tuxcare.els22_arm64.deb
sha:c1855fe78659e75d6e7c9b7663e4c79ced8c4498

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.