{"id":"CLSA-2026-1773757893","summary":"Fix CVE(s): CVE-2025-14847","details":"   * SECURITY UPDATE: Unauthenticated heap memory disclosure via mismatched\n     zlib compressed protocol headers (MongoBleed)\n     - debian/patches/CVE-2025-14847.patch: Return actual decompressed size\n       instead of buffer size in ZlibMessageCompressor::decompressData\n     - CVE-2025-14847","modified":"2026-06-04T09:47:31.257260733Z","published":"2026-03-17T14:31:37Z","upstream":["CVE-2025-14847"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1773757893.html"}],"affected":[{"package":{"name":"mongodb","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/mongodb?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.3-0ubuntu1.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1773757893.json"}},{"package":{"name":"mongodb-clients","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/mongodb-clients?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.3-0ubuntu1.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1773757893.json"}},{"package":{"name":"mongodb-server","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/mongodb-server?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.3-0ubuntu1.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1773757893.json"}},{"package":{"name":"mongodb-server-core","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/mongodb-server-core?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.6.3-0ubuntu1.4+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1773757893.json"}}],"schema_version":"1.7.5"}