-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:25:18 +0200
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: arm64
Version: 2.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u1) trixie-security; urgency=high
 .
   * PHPC-2744: Fix out-of-bounds read of field path
    + [CVE-2026-84968]: An out-of-bounds read in the BSON decoding
      component of the MongoDB PHP driver may allow an unauthenticated
      party who supplies specially formed input to have a small amount of
      adjacent process memory copied into an error message that is returned
      to application code. This may result in unintended disclosure of
      limited memory contents.
   * PHPC-2743: Fix __pclass inference in events
    + [CVE-2026-96745]: Deserialization of untrusted data in the command
      monitoring support of the MongoDB PHP Driver can cause class names
      embedded in document content to be honored when the driver builds
      monitoring event objects.
   * PHPC-2636: Respect libbson nesting limit when parsing PHP objects
    + [CVE-2026-6811]: Stack exhaustion vulnerability in the MongoDB PHP
      driver can cause application crashes when processing deeply nested
      BSON documents in unusual circumstances when the source of these BSON
      documents is not MongoDB Server.
Checksums-Sha1:
 9adad0efdeecc0cfc801b27c7a3b7eba95b82aa9 7561 php-mongodb_2.0.0-1+deb13u1_arm64-buildd.buildinfo
 48d9df4eefcf9e5822d48d6ce9143acd71927be1 3389656 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_arm64.deb
 68458501014fa067777c764e0cf97736ad5a82d0 686000 php8.4-mongodb_2.0.0-1+deb13u1_arm64.deb
Checksums-Sha256:
 4683559aa9eba2c472dbea910620470ebd8873cc77dc16d0d55c632f21296b2c 7561 php-mongodb_2.0.0-1+deb13u1_arm64-buildd.buildinfo
 a1239b767fb15be71278d2ce52800e9be89a3b9b4c868c6e887a6dc8aa065982 3389656 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_arm64.deb
 da57435e012b5b1f4c7a3632c0799d5a12397ad7b674aa050874e963d7d4b973 686000 php8.4-mongodb_2.0.0-1+deb13u1_arm64.deb
Files:
 36f278fbd8c6f8a71c5dc1a2db706aab 7561 php optional php-mongodb_2.0.0-1+deb13u1_arm64-buildd.buildinfo
 6a618dcf53027d50bb7d8deec0f3c0a5 3389656 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_arm64.deb
 7d98a707f394c74d99d8e62fc128d94f 686000 php optional php8.4-mongodb_2.0.0-1+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=IKvh
-----END PGP SIGNATURE-----