-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 25 Oct 2026 19:36:57 +0100
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: armel
Version: 2.0.0-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u2) trixie-security; urgency=high
 .
   * Backported from 2.1.11:
    + [CVE-2026-106432]: Bound-check string and binary lengths in BSON
      encoder
    + [CVE-2026-106436]: Check libbson append return values in BSON encoder
   * Backported from 2.1.12:
    + [CVE-2026-112368]: Prevent stack exhaustion when decoding deeply
      nested BSON
Checksums-Sha1:
 d0e891fd58bfe5e07f0395903aff5330783b2777 7426 php-mongodb_2.0.0-1+deb13u2_armel-buildd.buildinfo
 48b3ea32fbca7069e0bfb9bc713afbf2118ed58f 3324512 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_armel.deb
 9052063ad20190f473dbfb99ed92564ddeee8004 652392 php8.4-mongodb_2.0.0-1+deb13u2_armel.deb
Checksums-Sha256:
 e9d8cb9a418e50e8ad770aca3f43a87a69eaf7a6c56a04b09a6c5fbcf6a03fc4 7426 php-mongodb_2.0.0-1+deb13u2_armel-buildd.buildinfo
 0cac775d7241eb13f63f7a578eb204870de73175cf801dfee947caae22bcfdd3 3324512 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_armel.deb
 b2e80c277fab0f78fd42bd0b96b80455236513471afd85ba20826cfd24c3d9c3 652392 php8.4-mongodb_2.0.0-1+deb13u2_armel.deb
Files:
 b111ddf18e5fc0a17438080837261620 7426 php optional php-mongodb_2.0.0-1+deb13u2_armel-buildd.buildinfo
 82641f279b2ac9eddc48310507fb692b 3324512 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_armel.deb
 a0e8be019a19e294e4fdb084f4963d56 652392 php optional php8.4-mongodb_2.0.0-1+deb13u2_armel.deb

-----BEGIN PGP SIGNATURE-----
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=wW8J
-----END PGP SIGNATURE-----