-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:25:18 +0200
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: armhf
Version: 2.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u1) trixie-security; urgency=high
 .
   * PHPC-2744: Fix out-of-bounds read of field path
    + [CVE-2026-84968]: An out-of-bounds read in the BSON decoding
      component of the MongoDB PHP driver may allow an unauthenticated
      party who supplies specially formed input to have a small amount of
      adjacent process memory copied into an error message that is returned
      to application code. This may result in unintended disclosure of
      limited memory contents.
   * PHPC-2743: Fix __pclass inference in events
    + [CVE-2026-96745]: Deserialization of untrusted data in the command
      monitoring support of the MongoDB PHP Driver can cause class names
      embedded in document content to be honored when the driver builds
      monitoring event objects.
   * PHPC-2636: Respect libbson nesting limit when parsing PHP objects
    + [CVE-2026-6811]: Stack exhaustion vulnerability in the MongoDB PHP
      driver can cause application crashes when processing deeply nested
      BSON documents in unusual circumstances when the source of these BSON
      documents is not MongoDB Server.
Checksums-Sha1:
 d9cefd985411121026657a5c1154ea1990edcae5 7440 php-mongodb_2.0.0-1+deb13u1_armhf-buildd.buildinfo
 12fe69d7c8ecb4aa764f0d665c6f94f9be89b2df 3335580 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_armhf.deb
 232ccaac1a2fe620583997edc32f411b5e6f57af 667420 php8.4-mongodb_2.0.0-1+deb13u1_armhf.deb
Checksums-Sha256:
 7d6261ab5ac4ae836b8dba08e3b589a00ea6ff543e601492f75d40e210059a27 7440 php-mongodb_2.0.0-1+deb13u1_armhf-buildd.buildinfo
 996dfbd3caf4c22a7e9999c87a0efbc7a2797d3086b85ec86d0e3b226753de86 3335580 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_armhf.deb
 a07df5cf7c735355cea79a426ff7932efdd8486a1c54d05eb5c84637b520921c 667420 php8.4-mongodb_2.0.0-1+deb13u1_armhf.deb
Files:
 6c64c7abb14e1e732ca9d8bc2ef7bd18 7440 php optional php-mongodb_2.0.0-1+deb13u1_armhf-buildd.buildinfo
 bff7b06d0bec36825ecfde15c6088826 3335580 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_armhf.deb
 b1dd0425f910efa9dfbc7c375d7ded91 667420 php optional php8.4-mongodb_2.0.0-1+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=sRGE
-----END PGP SIGNATURE-----