-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 25 Oct 2026 19:36:57 +0100
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: amd64
Version: 2.0.0-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u2) trixie-security; urgency=high
 .
   * Backported from 2.1.11:
    + [CVE-2026-106432]: Bound-check string and binary lengths in BSON
      encoder
    + [CVE-2026-106436]: Check libbson append return values in BSON encoder
   * Backported from 2.1.12:
    + [CVE-2026-112368]: Prevent stack exhaustion when decoding deeply
      nested BSON
Checksums-Sha1:
 3fe95ef1c9f769ed29f478e8e93e9cd7fb308558 7574 php-mongodb_2.0.0-1+deb13u2_amd64-buildd.buildinfo
 c79c463c6a9cc48c61e61a16a9ba6bf0850bb8f0 3440912 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_amd64.deb
 7e0864d18775908c6eaf7c43ba7385441ddaba7b 746344 php8.4-mongodb_2.0.0-1+deb13u2_amd64.deb
Checksums-Sha256:
 2f125baba96407b2914babd19fce14565e9630cb3d5b3183f6246a8ca2bbf7cd 7574 php-mongodb_2.0.0-1+deb13u2_amd64-buildd.buildinfo
 09b66e7bc06884f359e3861bf30c3d9f1552c2b8a9438dd68b959724556479c5 3440912 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_amd64.deb
 557094c9815dfa10490c085ef5dddc3d9df89046a45564a5a70455cad5d76a8d 746344 php8.4-mongodb_2.0.0-1+deb13u2_amd64.deb
Files:
 bb2127e7f7fa7be05fe2a68055e258ee 7574 php optional php-mongodb_2.0.0-1+deb13u2_amd64-buildd.buildinfo
 bd25388b8475360d6789045f57cea170 3440912 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_amd64.deb
 863743a603a859520d73697ffbdfc4ec 746344 php optional php8.4-mongodb_2.0.0-1+deb13u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=PJ7Y
-----END PGP SIGNATURE-----