{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Medium" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"mongo-c-driver security update", "category":"general", "title":"Synopsis" }, { "text":"An update for mongo-c-driver is now available for openEuler-24.03-LTS-SP3", "category":"general", "title":"Summary" }, { "text":"mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents.\n\nSecurity Fix(es):\n\nA weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.(CVE-2026-81524)\n\nAn incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data.(CVE-2026-84963)\n\nA double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly.(CVE-2026-84964)\n\nAn integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service.(CVE-2026-84965)\n\nA memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.(CVE-2026-84969)", "category":"general", "title":"Description" }, { "text":"An update for mongo-c-driver is now available for master/openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP4/openEuler-24.03-LTS-Next/openEuler-24.03-LTS-SP1/openEuler-24.03-LTS-SP3/openEuler-24.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Medium", "category":"general", "title":"Severity" }, { "text":"mongo-c-driver", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-4354", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4354" }, { "summary":"CVE-2026-81524", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-81524&packageName=mongo-c-driver" }, { "summary":"CVE-2026-84963", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-84963&packageName=mongo-c-driver" }, { "summary":"CVE-2026-84964", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-84964&packageName=mongo-c-driver" }, { "summary":"CVE-2026-84965", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-84965&packageName=mongo-c-driver" }, { "summary":"CVE-2026-84969", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-84969&packageName=mongo-c-driver" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81524" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84963" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84964" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84965" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84969" }, { "summary":"openEuler-SA-2026-4354 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-4354.json" } ], "title":"An update for mongo-c-driver is now available for openEuler-24.03-LTS-SP3", "tracking":{ "initial_release_date":"2026-10-22T09:28:08+08:00", "revision_history":[ { "date":"2026-10-22T09:28:08+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-10-22T09:28:08+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-10-22T09:28:08+08:00", "id":"openEuler-SA-2026-4354", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"openEuler-24.03-LTS-SP3", "name":"openEuler-24.03-LTS-SP3" }, "name":"openEuler-24.03-LTS-SP3", "category":"product_version" } ], "category":"product_name" }, { "name":"noarch", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch.rpm", "name":"mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch.rpm" }, "name":"mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"libbson-1.30.9-1.oe2403sp3.aarch64.rpm", "name":"libbson-1.30.9-1.oe2403sp3.aarch64.rpm" }, "name":"libbson-1.30.9-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"libbson-devel-1.30.9-1.oe2403sp3.aarch64.rpm", "name":"libbson-devel-1.30.9-1.oe2403sp3.aarch64.rpm" }, "name":"libbson-devel-1.30.9-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-1.30.9-1.oe2403sp3.aarch64.rpm", "name":"mongo-c-driver-1.30.9-1.oe2403sp3.aarch64.rpm" }, "name":"mongo-c-driver-1.30.9-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64.rpm", "name":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64.rpm" }, "name":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64.rpm", "name":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64.rpm" }, "name":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64.rpm", "name":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64.rpm" }, "name":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"libbson-1.30.9-1.oe2403sp3.x86_64.rpm", "name":"libbson-1.30.9-1.oe2403sp3.x86_64.rpm" }, "name":"libbson-1.30.9-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"libbson-devel-1.30.9-1.oe2403sp3.x86_64.rpm", "name":"libbson-devel-1.30.9-1.oe2403sp3.x86_64.rpm" }, "name":"libbson-devel-1.30.9-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-1.30.9-1.oe2403sp3.x86_64.rpm", "name":"mongo-c-driver-1.30.9-1.oe2403sp3.x86_64.rpm" }, "name":"mongo-c-driver-1.30.9-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64.rpm", "name":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64.rpm" }, "name":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64.rpm", "name":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64.rpm" }, "name":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64.rpm", "name":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64.rpm" }, "name":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"mongo-c-driver-1.30.9-1.oe2403sp3.src.rpm", "name":"mongo-c-driver-1.30.9-1.oe2403sp3.src.rpm" }, "name":"mongo-c-driver-1.30.9-1.oe2403sp3.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "name":"mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"libbson-1.30.9-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "name":"libbson-1.30.9-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"libbson-devel-1.30.9-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "name":"libbson-devel-1.30.9-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-1.30.9-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "name":"mongo-c-driver-1.30.9-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "name":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "name":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "name":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"libbson-1.30.9-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "name":"libbson-1.30.9-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"libbson-devel-1.30.9-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "name":"libbson-devel-1.30.9-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-1.30.9-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "name":"mongo-c-driver-1.30.9-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "name":"mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "name":"mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "name":"mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"mongo-c-driver-1.30.9-1.oe2403sp3.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src", "name":"mongo-c-driver-1.30.9-1.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-81524", "notes":[ { "text":"A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ], "details":"mongo-c-driver security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4354" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.3, "vectorString":"CVSS:3.1/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-81524" }, { "cve":"CVE-2026-84963", "notes":[ { "text":"An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ], "details":"mongo-c-driver security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4354" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.3, "vectorString":"CVSS:3.1/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-84963" }, { "cve":"CVE-2026-84964", "notes":[ { "text":"A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ], "details":"mongo-c-driver security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4354" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.9, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-84964" }, { "cve":"CVE-2026-84965", "notes":[ { "text":"An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ], "details":"mongo-c-driver security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4354" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.9, "vectorString":"CVSS:3.1/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-84965" }, { "cve":"CVE-2026-84969", "notes":[ { "text":"A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ], "details":"mongo-c-driver security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4354" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.3, "vectorString":"CVSS:3.1/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:mongo-c-driver-help-1.30.9-1.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:libbson-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:libbson-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debuginfo-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-debugsource-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-devel-1.30.9-1.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:mongo-c-driver-1.30.9-1.oe2403sp3.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-84969" } ] }