-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:25:18 +0200
Source: php-mongodb
Binary: php-mongodb php-mongodb-all-dev
Architecture: all
Version: 2.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php-mongodb - MongoDB driver for PHP
 php-mongodb-all-dev - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u1) trixie-security; urgency=high
 .
   * PHPC-2744: Fix out-of-bounds read of field path
    + [CVE-2026-84968]: An out-of-bounds read in the BSON decoding
      component of the MongoDB PHP driver may allow an unauthenticated
      party who supplies specially formed input to have a small amount of
      adjacent process memory copied into an error message that is returned
      to application code. This may result in unintended disclosure of
      limited memory contents.
   * PHPC-2743: Fix __pclass inference in events
    + [CVE-2026-96745]: Deserialization of untrusted data in the command
      monitoring support of the MongoDB PHP Driver can cause class names
      embedded in document content to be honored when the driver builds
      monitoring event objects.
   * PHPC-2636: Respect libbson nesting limit when parsing PHP objects
    + [CVE-2026-6811]: Stack exhaustion vulnerability in the MongoDB PHP
      driver can cause application crashes when processing deeply nested
      BSON documents in unusual circumstances when the source of these BSON
      documents is not MongoDB Server.
Checksums-Sha1:
 416a4be2fb4d0beb9a5be941cfb3b87ed37c0993 7328 php-mongodb-all-dev_2.0.0-1+deb13u1_all.deb
 b2655896e6fe1c20f12e528b1359a49bd557ab65 7525 php-mongodb_2.0.0-1+deb13u1_all-buildd.buildinfo
 8a17de45cfe7c0106a97f86c280b7d5d33cba956 7300 php-mongodb_2.0.0-1+deb13u1_all.deb
Checksums-Sha256:
 7186335da7a65c22ebbf76f3f512b824c9bf1d13c482ece9d34f8b1eaaf52608 7328 php-mongodb-all-dev_2.0.0-1+deb13u1_all.deb
 dbd29c966a812032908c024158c26f4158b16820c117b5d5bbc9725d2e1d2675 7525 php-mongodb_2.0.0-1+deb13u1_all-buildd.buildinfo
 fc63144caa45478904078764f7cc216db40dcf273533060c0ba1b758fab86937 7300 php-mongodb_2.0.0-1+deb13u1_all.deb
Files:
 77ac44c606a4382341283149b8da73bc 7328 php optional php-mongodb-all-dev_2.0.0-1+deb13u1_all.deb
 d47d01487432e8baefe1aa0c9ad5556f 7525 php optional php-mongodb_2.0.0-1+deb13u1_all-buildd.buildinfo
 34f68856f0a1fa9265efed3d76f7923a 7300 php optional php-mongodb_2.0.0-1+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=34CV
-----END PGP SIGNATURE-----