[CLSA-2026:1788424944] Fix CVE(s): CVE-2026-8199, CVE-2026-8202, CVE-2026-8336, CVE-2026-9749

Type:

security

Severity:

Moderate

Release date:

2026-09-11 15:48:21 UTC

Description:

   * SECURITY UPDATE: Denial of service through MaxKey values in a key-range
     $exchange stage
     - debian/patches/CVE-2026-9749.patch: route MaxKey field values to the
       last exchange consumer bucket instead of triggering an invariant
     - CVE-2026-9749

CVEs fixed:

Updated packages:

mongodb44_4.4.29-1+tuxcare.els16_amd64.deb
sha:d53fc4ae5dfdaefe5779ce8f73325dd7e5725266
mongodb44-mongos_4.4.29-1+tuxcare.els16_amd64.deb
sha:a224dff7733e77e1d6a9287d3ed64ba62e30eb82
mongodb44-server_4.4.29-1+tuxcare.els16_amd64.deb
sha:beb2520302c9ebe6065425288be086fc251836cb
mongodb44-shell_4.4.29-1+tuxcare.els16_amd64.deb
sha:afa6feafbc6949f52fc3f10a323acd1fa32bdc28
mongodb44_4.4.29-1+tuxcare.els16_arm64.deb
sha:0322168d7246b04d57772e4e2f9c75f8ddf058b5
mongodb44-mongos_4.4.29-1+tuxcare.els16_arm64.deb
sha:11ffb6e9cf39e3fa334c0148bbf9c3e9e68ab980
mongodb44-server_4.4.29-1+tuxcare.els16_arm64.deb
sha:5227f8f793e6b12177643a33c3a704cc9ec78e8c
mongodb44-shell_4.4.29-1+tuxcare.els16_arm64.deb
sha:f62d91cc00e50cb4c4c56a4dfa40d0beec503eb1

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.