Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-12889

Критический

ALT-PU-2026-12889: package mongo7.0 update to version 7.0.39-alt1

Источник
errata.altlinux.org
Дата публикации
12.08.2026
Дата обновления
31.10.2026
Устраненные уязвимости
17

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades mongo7.0 to version 7.0.39-alt1.

Устраненные уязвимости17

Связанные уязвимости

CVSS3: 6.5
ubuntu
4 месяца назад

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

CVSS3: 6.5
nvd
4 месяца назад

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

CVSS3: 6.5
debian
4 месяца назад

The `$_internalIndexKey` aggregation expression can be used by any aut ...

CVSS3: 6.5
redos
5 дней назад

Множественные уязвимости mongodb-org

CVSS3: 6.5
redos
5 дней назад

Множественные уязвимости mongodb-org