[CLSA-2026:1793627960] Fix CVE(s): CVE-2020-23914, CVE-2020-23915
Type:
security
Severity:
Moderate
Release date:
2026-11-02 13:59:32 UTC
Description:
* SECURITY UPDATE: NULL pointer dereference in the bundled cpp-peglib AstOptimizer::optimize() - debian/patches/CVE-2020-23914.patch: reject grammars whose start rule has the ignore operator before building the parser - CVE-2020-23914 * SECURITY UPDATE: heap buffer over-read in the bundled cpp-peglib resolve_escape_sequence() - debian/patches/CVE-2020-23915.patch: check the remaining length in codepoint_length() before returning a multi-byte length - CVE-2020-23915
Updated packages:
  • mongodb5_5.0.31-1+tuxcare.els19_amd64.deb
    sha:436af23352b3b029a07e51728481e1fd0869d28a
  • mongodb5-mongos_5.0.31-1+tuxcare.els19_amd64.deb
    sha:2d71adbf1c63f17ca9cbcfada60346cf6af28411
  • mongodb5-server_5.0.31-1+tuxcare.els19_amd64.deb
    sha:083155538be8fb5fa16934c97a8a98874bcbb2de
  • mongodb5-shell_5.0.31-1+tuxcare.els19_amd64.deb
    sha:4dfb8a45fca2dcdf3ea27d92ec42fd4608588590
  • mongodb5_5.0.31-1+tuxcare.els19_arm64.deb
    sha:a7cb1cb29024783a0205c614e1b2df87bcf26255
  • mongodb5-mongos_5.0.31-1+tuxcare.els19_arm64.deb
    sha:45ee8f4808966f2838761dae959c4f06fb8300d0
  • mongodb5-server_5.0.31-1+tuxcare.els19_arm64.deb
    sha:8036aa6a7766a98b1f55f299048c6dc3db0b1aad
  • mongodb5-shell_5.0.31-1+tuxcare.els19_arm64.deb
    sha:904b807e428700f7c4a3753edd320b5802be9fd1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.