An update for mongo-c-driver is now available for openEuler-24.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4355 Final 1.0 1.0 2026-10-16 Initial 2026-10-16 2026-10-16 openEuler SA Tool V1.0 2026-10-16 mongo-c-driver security update An update for mongo-c-driver is now available for openEuler-24.03-LTS-SP4 mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fix(es): A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.(CVE-2026-81524) An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data.(CVE-2026-84963) A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly.(CVE-2026-84964) An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service.(CVE-2026-84965) A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered.(CVE-2026-84969) An update for mongo-c-driver is now available for master/openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP4/openEuler-24.03-LTS-Next/openEuler-24.03-LTS-SP1/openEuler-24.03-LTS-SP3/openEuler-24.03-LTS-SP4. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium mongo-c-driver https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4355 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-81524 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-84963 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-84964 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-84965 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-84969 https://nvd.nist.gov/vuln/detail/CVE-2026-81524 https://nvd.nist.gov/vuln/detail/CVE-2026-84963 https://nvd.nist.gov/vuln/detail/CVE-2026-84964 https://nvd.nist.gov/vuln/detail/CVE-2026-84965 https://nvd.nist.gov/vuln/detail/CVE-2026-84969 openEuler-24.03-LTS-SP4 libbson-1.30.9-1.oe2403sp4.x86_64.rpm libbson-devel-1.30.9-1.oe2403sp4.x86_64.rpm mongo-c-driver-1.30.9-1.oe2403sp4.x86_64.rpm mongo-c-driver-debuginfo-1.30.9-1.oe2403sp4.x86_64.rpm mongo-c-driver-debugsource-1.30.9-1.oe2403sp4.x86_64.rpm mongo-c-driver-devel-1.30.9-1.oe2403sp4.x86_64.rpm mongo-c-driver-1.30.9-1.oe2403sp4.src.rpm mongo-c-driver-help-1.30.9-1.oe2403sp4.noarch.rpm libbson-1.30.9-1.oe2403sp4.aarch64.rpm libbson-devel-1.30.9-1.oe2403sp4.aarch64.rpm mongo-c-driver-1.30.9-1.oe2403sp4.aarch64.rpm mongo-c-driver-debuginfo-1.30.9-1.oe2403sp4.aarch64.rpm mongo-c-driver-debugsource-1.30.9-1.oe2403sp4.aarch64.rpm mongo-c-driver-devel-1.30.9-1.oe2403sp4.aarch64.rpm A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended. 2026-10-16 CVE-2026-81524 openEuler-24.03-LTS-SP4 Medium 5.3 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X mongo-c-driver security update 2026-10-16 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4355 An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticated party who can supply the input processed by an application that uses this component may cause that application to hold data that does not match what was submitted, which may result in unintended alteration of data. 2026-10-16 CVE-2026-84963 openEuler-24.03-LTS-SP4 Medium 6.3 AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N mongo-c-driver security update 2026-10-16 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4355 A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly. 2026-10-16 CVE-2026-84964 openEuler-24.03-LTS-SP4 Medium 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H mongo-c-driver security update 2026-10-16 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4355 An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently large JSON input to an application that links the library may cause that application to terminate unexpectedly, resulting in denial of service. 2026-10-16 CVE-2026-84965 openEuler-24.03-LTS-SP4 Medium 5.9 AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N mongo-c-driver security update 2026-10-16 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4355 A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no privileges on the application that links the driver, may cause a small amount of data outside the intended buffer to be altered. 2026-10-16 CVE-2026-84969 openEuler-24.03-LTS-SP4 Medium 6.3 AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X mongo-c-driver security update 2026-10-16 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4355