-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 25 Oct 2026 19:36:57 +0100
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: i386
Version: 2.0.0-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u2) trixie-security; urgency=high
 .
   * Backported from 2.1.11:
    + [CVE-2026-106432]: Bound-check string and binary lengths in BSON
      encoder
    + [CVE-2026-106436]: Check libbson append return values in BSON encoder
   * Backported from 2.1.12:
    + [CVE-2026-112368]: Prevent stack exhaustion when decoding deeply
      nested BSON
Checksums-Sha1:
 b4cdb188ef170764fff8bb734b63b7bc2e1783eb 7475 php-mongodb_2.0.0-1+deb13u2_i386-buildd.buildinfo
 02646efbbbb29a2d11f84f458df6f8e253054e59 2961444 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_i386.deb
 e5519ab92bb9b39c6b4eac3d64046b64bc429674 812128 php8.4-mongodb_2.0.0-1+deb13u2_i386.deb
Checksums-Sha256:
 b666e130cd3c0530b760030be9824a5d544cd0fde46166daccb0c1e03cc9acc9 7475 php-mongodb_2.0.0-1+deb13u2_i386-buildd.buildinfo
 49f16083067475571bffcb23fa683d6f93ca74ff2f76c11aee42c5489877b310 2961444 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_i386.deb
 3971739906e9fbbecb1efc6a547f0b047025fab1042d7d42c5b7cf68ad6f367b 812128 php8.4-mongodb_2.0.0-1+deb13u2_i386.deb
Files:
 3d676a617cd8d70d7e0fb5e37f84c08d 7475 php optional php-mongodb_2.0.0-1+deb13u2_i386-buildd.buildinfo
 2e2d453842e6a08040d8a530dc4c9345 2961444 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_i386.deb
 4ccccbd283c3c0fb9b49e68f63ea9a07 812128 php optional php8.4-mongodb_2.0.0-1+deb13u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=Pmgx
-----END PGP SIGNATURE-----