-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 25 Oct 2026 19:36:57 +0100
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: s390x
Version: 2.0.0-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u2) trixie-security; urgency=high
 .
   * Backported from 2.1.11:
    + [CVE-2026-106432]: Bound-check string and binary lengths in BSON
      encoder
    + [CVE-2026-106436]: Check libbson append return values in BSON encoder
   * Backported from 2.1.12:
    + [CVE-2026-112368]: Prevent stack exhaustion when decoding deeply
      nested BSON
Checksums-Sha1:
 43253e47a31ef71736168505f24f7098977f1a9a 7436 php-mongodb_2.0.0-1+deb13u2_s390x-buildd.buildinfo
 da532d1272a33998c7df4b1b2780d1332332d2a6 3461520 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_s390x.deb
 bcaa5095d9af211ae66f48840e159f4edf7f5491 686076 php8.4-mongodb_2.0.0-1+deb13u2_s390x.deb
Checksums-Sha256:
 0a6107a8495747e2c65fc1f2bc61697b64c257720ecc8a26b956846ca72dfc6c 7436 php-mongodb_2.0.0-1+deb13u2_s390x-buildd.buildinfo
 6e215b0780a2b414b65d7c926c38ae68e4bddcae93c509d0dfebc3aef8626ae3 3461520 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_s390x.deb
 90e301d6a5dea7f185d84da47170c4ce63f253bd061dd13f9f3e8491634b49d6 686076 php8.4-mongodb_2.0.0-1+deb13u2_s390x.deb
Files:
 7607e57be08d6899d0231db57dc9f1d2 7436 php optional php-mongodb_2.0.0-1+deb13u2_s390x-buildd.buildinfo
 ee24067a9adb1855e3f8b4e7675e806d 3461520 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_s390x.deb
 dcb131369817b2d1f8f42ace3dfba2e5 686076 php optional php8.4-mongodb_2.0.0-1+deb13u2_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=MzbA
-----END PGP SIGNATURE-----