Release date:
2026-10-10 07:32:59 UTC
Description:
* SECURITY UPDATE: Denial of service through very large intermediate arrays
and objects built by aggregation expressions
- debian/patches/CVE-2026-13056.patch: add the
internalQueryMaxExpressionOutputBytes limit and enforce it in $array,
$object, $concatArrays, $setUnion and $zip
- CVE-2026-13056
* SECURITY UPDATE: Crash or incorrect results when user fields collide with
internal metadata field names
- debian/patches/CVE-2026-9750.patch: skip lazy metadata loading for
documents without system-injected metadata, hide metadata-named user
fields and strip them when serializing documents with metadata
- CVE-2026-9750
Updated packages:
-
mongodb44_4.4.29-1+tuxcare.els18_amd64.deb
sha:c29a45c66324629e995336acf2960951a91c5c53
-
mongodb44-mongos_4.4.29-1+tuxcare.els18_amd64.deb
sha:53a909d8756226105143d8038bfc1e7592cf9acf
-
mongodb44-server_4.4.29-1+tuxcare.els18_amd64.deb
sha:3e527a75500c950d7488d1503cc888ef2cdc4404
-
mongodb44-shell_4.4.29-1+tuxcare.els18_amd64.deb
sha:5df746931329299fabd2576e80e80c8872647915
-
mongodb44_4.4.29-1+tuxcare.els18_arm64.deb
sha:a4c6a917bad743cc17aceaf6cf2c3626072b5dd0
-
mongodb44-mongos_4.4.29-1+tuxcare.els18_arm64.deb
sha:3c2441a7da62d93bdc82e66534a4a6ab39b1deec
-
mongodb44-server_4.4.29-1+tuxcare.els18_arm64.deb
sha:68abd5039332622eb3a54c74e9ab2ceec2539435
-
mongodb44-shell_4.4.29-1+tuxcare.els18_arm64.deb
sha:30241081dacbb298ba000fde1c8f3f05ff74b0c5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
