-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 25 Oct 2026 19:36:57 +0100
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: arm64
Version: 2.0.0-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u2) trixie-security; urgency=high
 .
   * Backported from 2.1.11:
    + [CVE-2026-106432]: Bound-check string and binary lengths in BSON
      encoder
    + [CVE-2026-106436]: Check libbson append return values in BSON encoder
   * Backported from 2.1.12:
    + [CVE-2026-112368]: Prevent stack exhaustion when decoding deeply
      nested BSON
Checksums-Sha1:
 1c8bb9adfca76f5294e1699503f8a3d617b72f2a 7561 php-mongodb_2.0.0-1+deb13u2_arm64-buildd.buildinfo
 104407d27a61431b92e074b2eae2f4d8ba90226d 3405684 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_arm64.deb
 0c1106278a20e53e932a21ab28469f0d505d0b67 690776 php8.4-mongodb_2.0.0-1+deb13u2_arm64.deb
Checksums-Sha256:
 d5cdef974d4b01bbe9dd3ad3710667efbbb9ff99b0b1a97a753c2c8738abebc7 7561 php-mongodb_2.0.0-1+deb13u2_arm64-buildd.buildinfo
 7e98f2da227f44c6feade677d93af1855f8f47073f835fe75acc9dd240a14877 3405684 php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_arm64.deb
 6511b7a3c5030a5896ebddb18615369d37966a5dad38f987345651e32e87de00 690776 php8.4-mongodb_2.0.0-1+deb13u2_arm64.deb
Files:
 15d948bd14e85ea4325c4fad9cdb1c6a 7561 php optional php-mongodb_2.0.0-1+deb13u2_arm64-buildd.buildinfo
 759b65a67e358e911573cbb0be812cd3 3405684 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u2_arm64.deb
 da866364b92188247427b18fcd302b5c 690776 php optional php8.4-mongodb_2.0.0-1+deb13u2_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=kLtc
-----END PGP SIGNATURE-----