-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 25 Oct 2026 19:36:57 +0100
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: ppc64el
Version: 2.0.0-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-conova-02) <buildd_ppc64el-ppc64el-conova-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u2) trixie-security; urgency=high
 .
   * Backported from 2.1.11:
    + [CVE-2026-106432]: Bound-check string and binary lengths in BSON
      encoder
    + [CVE-2026-106436]: Check libbson append return values in BSON encoder
   * Backported from 2.1.12:
    + [CVE-2026-112368]: Prevent stack exhaustion when decoding deeply
      nested BSON
Checksums-Sha1:
 da19270ce7e13241714a79380913bb620d6e05e3 7573 php-mongodb_2.0.0-1+deb13u2_ppc64el-buildd.buildinfo
 21874c97ac189f66ce8d7cff80651b9957b71227 3497964 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_ppc64el.deb
 fa63224185613881b39a5b2775bc49399efb57e6 784304 php8.4-mongodb_2.0.0-1+deb13u2_ppc64el.deb
Checksums-Sha256:
 865a104c63ab777ce308a243e69f045e0f2d49ab8a914b30fcd6b27c6221e0d6 7573 php-mongodb_2.0.0-1+deb13u2_ppc64el-buildd.buildinfo
 9d49febf55be140148727faf0c277eec2b35a34063d8c5ff925ff5dc7ee4e8b0 3497964 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_ppc64el.deb
 d772bd8d826b6fb7734b64ae65237785bc7e24d817de931dbc870e30e4e4fcfc 784304 php8.4-mongodb_2.0.0-1+deb13u2_ppc64el.deb
Files:
 93a4480fbfed8b1e9461e12fee68e1e7 7573 php optional php-mongodb_2.0.0-1+deb13u2_ppc64el-buildd.buildinfo
 8c6a43e672d730af211f53f37af6806e 3497964 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_ppc64el.deb
 e05cd4051679024e486a723d0ac36e55 784304 php optional php8.4-mongodb_2.0.0-1+deb13u2_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=JSPR
-----END PGP SIGNATURE-----