[CLSA-2026:1776598310] Fix CVE(s): CVE-2026-1849
Type:
security
Severity:
Important
Release date:
2026-04-19 11:31:54 UTC
Description:
* SECURITY UPDATE: Uncontrolled recursion in ExpressionReduce::evaluate() - debian/patches/CVE-2026-1849.patch: add Value::depth() method and periodic depth check in the $reduce accumulation loop to throw Overflow error when accumulated value exceeds maximum allowable BSON depth - CVE-2026-1849
Updated packages:
  • mongodb44_4.4.29-1+tuxcare.els6_amd64.deb
    sha:1751e3274527984ca8a1f88545fbfe27284db8a1
  • mongodb44-mongos_4.4.29-1+tuxcare.els6_amd64.deb
    sha:be2284ce6beae7d6d5f1ea08e16e10b3d8af4207
  • mongodb44-server_4.4.29-1+tuxcare.els6_amd64.deb
    sha:adf8966136afb49151f7496bc66251f1e356ff54
  • mongodb44-shell_4.4.29-1+tuxcare.els6_amd64.deb
    sha:5f110be5a4fb9d15c7e4409991c33238802f6ef7
  • mongodb44_4.4.29-1+tuxcare.els6_arm64.deb
    sha:098e2b3a0b5fb6a2448bf4d8856aed5dd5e78a55
  • mongodb44-mongos_4.4.29-1+tuxcare.els6_arm64.deb
    sha:e2c5fddc41c4a9c0b762a8bdfc73a032bc6e2033
  • mongodb44-server_4.4.29-1+tuxcare.els6_arm64.deb
    sha:b439c68ae59f160e919287fe5d271b2be32c7c52
  • mongodb44-shell_4.4.29-1+tuxcare.els6_arm64.deb
    sha:1cd37a4db2ebc7936da195b32b323b09093231d0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.