Advisories » MGASA-2014-0083

Updated mongodb package fixes security vulnerability

Publication date: 17 Feb 2014
Modification date: 17 Feb 2014
Type: security
Affected Mageia releases : 3
CVE: CVE-2012-6619

Description

A possible DoS issue was discovered in MongoDB (CVE-2012-6619).
The --objcheck command line switch has now been enabled by default in 
the mongod service as a protective measure.
                

References

• http://openwall.com/lists/oss-security/2014/01/08/9
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6619
• https://bugs.mageia.org/show_bug.cgi?id=12251
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6619

SRPMS

3/core

• mongodb-2.2.2-3.2.mga3