CVE-2019-2392 (https://jira.mongodb.org/browse/SERVER-43699): A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20. CVE-2020-7925 (https://jira.mongodb.org/browse/SERVER-49142): Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.0-rc12; v4.2 versions prior to 4.2.9. CVE-2020-7928 (https://jira.mongodb.org/browse/SERVER-49404): A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20. Maintainer, please proceed with stabilization when ready.
ultrabug: ping, ready?
Unable to check for sanity: > no match for package: dev-db/mongodb-4.2.10
It's time we get rid of pmasked packages and vulnerable ones yes, I've done this first: * commit 53e1b1668820ffaa146ca8806fd9e2a36e550662 (HEAD -> master, origin/master, origin/HEAD) | Author: Alexys Jacob <ultrabug@gentoo.org> | Date: Mon Jan 18 11:40:51 2021 +0100 | | dev-db/mongodb: drop pmasked and vulnerable wrt #760827 | | Package-Manager: Portage-3.0.13, Repoman-3.0.2 | Signed-off-by: Alexys Jacob <ultrabug@gentoo.org> | --- | 10 files changed, 945 deletions(-)
(In reply to Ultrabug from comment #3) > It's time we get rid of pmasked packages and vulnerable ones yes, I've done > this first: > > * commit 53e1b1668820ffaa146ca8806fd9e2a36e550662 (HEAD -> master, > origin/master, origin/HEAD) > | Author: Alexys Jacob <ultrabug@gentoo.org> > | Date: Mon Jan 18 11:40:51 2021 +0100 > | > | dev-db/mongodb: drop pmasked and vulnerable wrt #760827 > | > | Package-Manager: Portage-3.0.13, Repoman-3.0.2 > | Signed-off-by: Alexys Jacob <ultrabug@gentoo.org> > | --- > | 10 files changed, 945 deletions(-) How about 4.2.8? Do we need to stable 4.2.11?
yes we need to stable 4.2.11 before we can get rid of 4.2.8
(In reply to Ultrabug from comment #5) > yes we need to stable 4.2.11 before we can get rid of 4.2.8 Ok, please proceed when ready then!
(In reply to Ultrabug from comment #5) > yes we need to stable 4.2.11 before we can get rid of 4.2.8 Ready?
Yes please start stabilization, thank you!
amd64 done all arches done
Please cleanup
Cleanup done, tree is clean
(In reply to Ultrabug from comment #11) > Cleanup done, tree is clean Thank you!
Package list is empty or all packages have requested keywords.
