package/mongodb: security bump to version 4.0.19

Fixes the following security vulnerabilities:

- CVE-2020-7921: (4.0.15) Improper serialization of internal state in the
  authorization subsystem in MongoDB Server's authorization subsystem
  permits a user with valid credentials to bypass IP whitelisting protection
  mechanisms following administrative action.

Plus a number of other bugfixes. For details, see the release notes:
https://docs.mongodb.com/manual/release-notes/4.0/

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Peter Korsgaard 2020-07-22 10:11:39 +02:00
parent d82155fe7d
commit 5c6cdcf4a5
2 changed files with 2 additions and 2 deletions

View File

@ -1,4 +1,4 @@
# Locally computed:
sha256 b39c5b7bb77a547804ab6f43f9b5f09add47574356b31512fd1cc641a08b4ea5 mongodb-r4.0.12.tar.gz
sha256 fadfb81400a1b5d86d01943690064404856aaf1b050f4b56eb74811cadffdcef mongodb-r4.0.19.tar.gz
sha256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30 APACHE-2.0.txt
sha256 09d99ca61eb07873d5334077acba22c33e7f7d0a9fa08c92734e0ac8430d6e27 LICENSE-Community.txt

View File

@ -4,7 +4,7 @@
#
################################################################################
MONGODB_VERSION_BASE = 4.0.12
MONGODB_VERSION_BASE = 4.0.19
MONGODB_VERSION = r$(MONGODB_VERSION_BASE)
MONGODB_SITE = $(call github,mongodb,mongo,$(MONGODB_VERSION))