[CLSA-2026:1793629404] Fix CVE(s): CVE-2018-20573, CVE-2018-20574, CVE-2019-6285, CVE-2019-6292

Type:

security

Severity:

Moderate

Release date:

2026-11-02 14:23:36 UTC

Description:

   * SECURITY UPDATE: uncontrolled recursion in the bundled yaml-cpp parser
     - debian/patches/CVE-2018-20573.patch: limit the nesting depth in
       SingleDocParser::HandleNode() with a DepthGuard
     - CVE-2018-20573
     - CVE-2018-20574
     - CVE-2019-6285
     - CVE-2019-6292

CVEs fixed:

Updated packages:

mongodb42_4.2.25-1+tuxcare.els22_amd64.deb
sha:3c70ce9b05ebad6e396e9c1131ef6d11b148400d
mongodb42-mongos_4.2.25-1+tuxcare.els22_amd64.deb
sha:82fe79440f336179157a149f0d7b12d56b003589
mongodb42-server_4.2.25-1+tuxcare.els22_amd64.deb
sha:49e439f2fef303e0008e08a4f950c9f4737c4b83
mongodb42-shell_4.2.25-1+tuxcare.els22_amd64.deb
sha:a8a97abce499707ce278411175aeb144134bf286
mongodb42_4.2.25-1+tuxcare.els22_arm64.deb
sha:c6f32be60b99f13430994c235790b3d7fa2648e3
mongodb42-mongos_4.2.25-1+tuxcare.els22_arm64.deb
sha:ddf8e92d95eba81b2d9210d7ecb1077f4ef21b1f
mongodb42-server_4.2.25-1+tuxcare.els22_arm64.deb
sha:591ae4eaf75f046df70813d61bd88530ec2d8f40
mongodb42-shell_4.2.25-1+tuxcare.els22_arm64.deb
sha:8e466206f53619d70ec1900d59bb6f67687da63d

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.