[CLSA-2026:1793629268] Fix CVE(s): CVE-2018-20573, CVE-2018-20574, CVE-2019-6285, CVE-2019-6292

Type:

security

Severity:

Moderate

Release date:

2026-11-02 14:21:20 UTC

Description:

   * SECURITY UPDATE: uncontrolled recursion in the bundled yaml-cpp parser
     - debian/patches/CVE-2018-20573.patch: limit the nesting depth in
       SingleDocParser::HandleNode() with a DepthGuard
     - CVE-2018-20573
     - CVE-2018-20574
     - CVE-2019-6285
     - CVE-2019-6292

CVEs fixed:

Updated packages:

mongodb44_4.4.29-1+tuxcare.els21_amd64.deb
sha:07cef4ed733445aad09bfd2dc5f9f2039ef10dfc
mongodb44-mongos_4.4.29-1+tuxcare.els21_amd64.deb
sha:518c5fabc8f98561ed60722adb51a8ad8b7a4b73
mongodb44-server_4.4.29-1+tuxcare.els21_amd64.deb
sha:82975dd98c06174c990a74f3fec28aaec7b3bee9
mongodb44-shell_4.4.29-1+tuxcare.els21_amd64.deb
sha:2ee0d3982d401607b417608b4197d6d00125c848
mongodb44_4.4.29-1+tuxcare.els21_arm64.deb
sha:29cd02418968576a4b552351dc2b2254d791a4fe
mongodb44-mongos_4.4.29-1+tuxcare.els21_arm64.deb
sha:8ecc4a510177d61ead8a295cfdf75f997424c6e1
mongodb44-server_4.4.29-1+tuxcare.els21_arm64.deb
sha:5ef6e8f1a8565b8682942d8fa0f9f6f315308f0a
mongodb44-shell_4.4.29-1+tuxcare.els21_arm64.deb
sha:e61d7c0094992f553a5b6f015439241db510bc51

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.