Skip to content

mongo-c-driver 2.5.8

Latest
Latest

Choose a tag to compare

View all tags
@kevinAlbs kevinAlbs released this 03 Nov 15:14
· 130 commits to master since this release
2.5.8
This tag was signed with the committer’s verified signature.
kevinAlbs Kevin Albertson
SSH Key Fingerprint: yB7+6ti4ZHRFptKOTa8AAHMSkJmwdDjiQIw8v7D63sU
Verified
Learn about vigilant mode.
43a15b2
This commit was signed with the committer’s verified signature.
kevinAlbs Kevin Albertson
SSH Key Fingerprint: yB7+6ti4ZHRFptKOTa8AAHMSkJmwdDjiQIw8v7D63sU
Verified
Learn about vigilant mode.

Announcing 2.5.8 of libbson and libmongoc, the libraries constituting the MongoDB C Driver.

libbson

Fixes

  • Fix possible truncation in BSON binary vector on 32-bit builds. CVE-2026-120954

libmongoc

Fixes

  • Fix abort when parsing a cursor namespace without a dot separator.
  • Fix possible abort in mongoc_gridfs_bucket_download_to_stream on invalid file metadata. CVE-2026-120955
  • Fix handling of embedded NUL bytes in namespaces. CVE-2026-120956
  • Fix a missing bounds check when reading GridFS files. CVE-2026-120684
  • Fix a memory leak when an OP_COMPRESSED reply fails to parse. CVE-2026-120678
  • Report writeConcernError consistently, as mandated by the CRUD spec.

Links:

Thanks to everyone who contributed to this release.

  • Kevin Albertson
  • Sabrina Chang
  • Adrian Dole
Assets 4
Loading