-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 25 Oct 2026 19:36:57 +0100
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: riscv64
Version: 2.0.0-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-01) <buildd_riscv64-rv-osuosl-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u2) trixie-security; urgency=high
 .
   * Backported from 2.1.11:
    + [CVE-2026-106432]: Bound-check string and binary lengths in BSON
      encoder
    + [CVE-2026-106436]: Check libbson append return values in BSON encoder
   * Backported from 2.1.12:
    + [CVE-2026-112368]: Prevent stack exhaustion when decoding deeply
      nested BSON
Checksums-Sha1:
 6c18d9b5577c61f4474457d89c22f43e9f4cbf3a 7518 php-mongodb_2.0.0-1+deb13u2_riscv64-buildd.buildinfo
 5ae677c281f5d4c3bb5eaf7a9294b98f618e043e 3287424 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_riscv64.deb
 83e193cab88950ba78c1306ac2164716ef662a0e 762864 php8.4-mongodb_2.0.0-1+deb13u2_riscv64.deb
Checksums-Sha256:
 594bcdbe64cb94f60752789869d4aca5ece697d0f6f27f339fe70a50b6ad261f 7518 php-mongodb_2.0.0-1+deb13u2_riscv64-buildd.buildinfo
 84bbc6b7eddfcc7fed9fefd9913c0d3813c76a26a179a904dbd0f8d491614b5f 3287424 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_riscv64.deb
 f6ce52334c0d0006c66d9a9933cfe8b8e4797e1880f2cd0572c533b9489b8a23 762864 php8.4-mongodb_2.0.0-1+deb13u2_riscv64.deb
Files:
 f2cacf4fdfba69b320b3a896096065f0 7518 php optional php-mongodb_2.0.0-1+deb13u2_riscv64-buildd.buildinfo
 309538e8f9f3561f0f88ea55edf8bc38 3287424 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_riscv64.deb
 b4cd84f818d212393ce702c5ef20c719 762864 php optional php8.4-mongodb_2.0.0-1+deb13u2_riscv64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE3smN1vgomTkXJcrkIhSPlPtgqxkFAmreWKgACgkQIhSPlPtg
qxlseBAAuqQsj/moV2XgO0mowoHKfs0FDK6uCQ4878/TRf7anjSbw9bffonTg2yW
A0Py3PFUUe9yvO8kqPyGqOw4W89mNQF7MVUKMEmnXf4c+ELY4p2enu3xYc7wGJBx
YfFm9Y9A5Hmb+L6jpO0LNAl5Hpw2YJPjhHmSSPP/d6ilE5J2VPyzyK4h/envfwqT
vWkKLh9noNpHUiF/Jr4ViAkZ4ciUB91dgtrPT1DTpnnKWYGZurmaLEkl1nlsHkOg
DO8XENaqY3KT+FIqz+C9kYBTccANDJG347ljZ+xTB+G1vMP/+GJxhTupb+JQU/o/
BumzfsYKkcVEOp/94vJy1juNLsiCfRpchlExf8xiLfBa7MrhR+FbkH89w3kePbC2
23fXsbWwqup9KgDLT0slENnrlpZy2ySdfkEEnD5YMTprChj+d1aHrqsKBfpmX/7P
ZXH0nmTdwb9O1LgmP4bx6Zj0aN3QkalNJDJsB7z93cBykHnk+fzrTynnbfgAYcfQ
Rs6Mmq9jDKrCBg8exVZH1nvUwReCpyeLlTEd0lzfOyLEwSV8H2u32u4ZmPjzfXVI
o9ABhfwc0VO6VHazlTsENw0RwcmQMx/rLuS3S61OzhUYRdWnaTq2duwcs45cVs9w
p6CBXjBtEyKPMLq/+yPmpgY4S0Pux0LC70xGonl2t0lGubeLycQ=
=yvTC
-----END PGP SIGNATURE-----