-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 25 Oct 2026 19:36:57 +0100
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: armhf
Version: 2.0.0-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u2) trixie-security; urgency=high
 .
   * Backported from 2.1.11:
    + [CVE-2026-106432]: Bound-check string and binary lengths in BSON
      encoder
    + [CVE-2026-106436]: Check libbson append return values in BSON encoder
   * Backported from 2.1.12:
    + [CVE-2026-112368]: Prevent stack exhaustion when decoding deeply
      nested BSON
Checksums-Sha1:
 92870b3ecc67ad776908fe4c2fa32d887e177b30 7440 php-mongodb_2.0.0-1+deb13u2_armhf-buildd.buildinfo
 13ef97b0702a9df7ccd4834c1ac3bfecaaaa09f2 3352884 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_armhf.deb
 6ed23980d86ba6b257a2e974277adc7d3149937b 667328 php8.4-mongodb_2.0.0-1+deb13u2_armhf.deb
Checksums-Sha256:
 a720243c494dae107574d90d136d49dd1586953c3a353b1723cc98c8d82fad3a 7440 php-mongodb_2.0.0-1+deb13u2_armhf-buildd.buildinfo
 f1ade40bdd8b45fc95b9ace63c274a4f4f825e2dd98be852258a4e390d97e2c6 3352884 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_armhf.deb
 6e84650f3e24f8ad46d53efb800312d3ba48b416ffc663dea8031d3fcda979e5 667328 php8.4-mongodb_2.0.0-1+deb13u2_armhf.deb
Files:
 5ceab4ba64a4a2788114e3396db8247f 7440 php optional php-mongodb_2.0.0-1+deb13u2_armhf-buildd.buildinfo
 da7620cce8ec71cf0c436e53582bdc0c 3352884 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_armhf.deb
 cf679bb8921c50475608aba9d09ca2e7 667328 php optional php8.4-mongodb_2.0.0-1+deb13u2_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=9Gyg
-----END PGP SIGNATURE-----