-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:25:18 +0200
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: ppc64el
Version: 2.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) <buildd_ppc64el-ppc64el-osuosl-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u1) trixie-security; urgency=high
 .
   * PHPC-2744: Fix out-of-bounds read of field path
    + [CVE-2026-84968]: An out-of-bounds read in the BSON decoding
      component of the MongoDB PHP driver may allow an unauthenticated
      party who supplies specially formed input to have a small amount of
      adjacent process memory copied into an error message that is returned
      to application code. This may result in unintended disclosure of
      limited memory contents.
   * PHPC-2743: Fix __pclass inference in events
    + [CVE-2026-96745]: Deserialization of untrusted data in the command
      monitoring support of the MongoDB PHP Driver can cause class names
      embedded in document content to be honored when the driver builds
      monitoring event objects.
   * PHPC-2636: Respect libbson nesting limit when parsing PHP objects
    + [CVE-2026-6811]: Stack exhaustion vulnerability in the MongoDB PHP
      driver can cause application crashes when processing deeply nested
      BSON documents in unusual circumstances when the source of these BSON
      documents is not MongoDB Server.
Checksums-Sha1:
 9d80b49d5eedb6bff6c74c7b32db3090bbc21a0a 7573 php-mongodb_2.0.0-1+deb13u1_ppc64el-buildd.buildinfo
 6673e052bad33f99bcbc20af3dad48877de07f77 3479048 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_ppc64el.deb
 a5243ea350e71edbc7ea8a285cd38f377d573f04 782212 php8.4-mongodb_2.0.0-1+deb13u1_ppc64el.deb
Checksums-Sha256:
 733aef92602bda87d0653c34f6bf119944edbb51955c894bcd371baeadaeb4e9 7573 php-mongodb_2.0.0-1+deb13u1_ppc64el-buildd.buildinfo
 0908ff72e29256938e30d9777ada8bebb0ef63d92b7448ac6dd8804ad1f288be 3479048 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_ppc64el.deb
 82bb58295624178130d9db9bf0391899aa5659f94c6f2c9fdb2925cd3db20ee1 782212 php8.4-mongodb_2.0.0-1+deb13u1_ppc64el.deb
Files:
 42af2211e457d454a9db1bdba5b7bfb1 7573 php optional php-mongodb_2.0.0-1+deb13u1_ppc64el-buildd.buildinfo
 a23459de1cded7645e558cf749d2bfe1 3479048 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_ppc64el.deb
 744f223c15e9eae15488870646a5e9cc 782212 php optional php8.4-mongodb_2.0.0-1+deb13u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=JncY
-----END PGP SIGNATURE-----