-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:25:18 +0200
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: amd64
Version: 2.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u1) trixie-security; urgency=high
 .
   * PHPC-2744: Fix out-of-bounds read of field path
    + [CVE-2026-84968]: An out-of-bounds read in the BSON decoding
      component of the MongoDB PHP driver may allow an unauthenticated
      party who supplies specially formed input to have a small amount of
      adjacent process memory copied into an error message that is returned
      to application code. This may result in unintended disclosure of
      limited memory contents.
   * PHPC-2743: Fix __pclass inference in events
    + [CVE-2026-96745]: Deserialization of untrusted data in the command
      monitoring support of the MongoDB PHP Driver can cause class names
      embedded in document content to be honored when the driver builds
      monitoring event objects.
   * PHPC-2636: Respect libbson nesting limit when parsing PHP objects
    + [CVE-2026-6811]: Stack exhaustion vulnerability in the MongoDB PHP
      driver can cause application crashes when processing deeply nested
      BSON documents in unusual circumstances when the source of these BSON
      documents is not MongoDB Server.
Checksums-Sha1:
 21496ddd9fc2ea4dbac6fa79b83e838862f22e51 7574 php-mongodb_2.0.0-1+deb13u1_amd64-buildd.buildinfo
 5e5080eb20c32a93024b548040cdf6287054ba38 3422548 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_amd64.deb
 305f9dd3ad15b07f48501cea9d58c4d913b92439 742180 php8.4-mongodb_2.0.0-1+deb13u1_amd64.deb
Checksums-Sha256:
 ec6a8fe8675ccd1ea94be4ceb31b2afc1aded363cef0370eb865af9eb4752386 7574 php-mongodb_2.0.0-1+deb13u1_amd64-buildd.buildinfo
 ac294263167a57cc579167dfefda42896b4f97ff12c0d434d195ae75703dddd3 3422548 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_amd64.deb
 88d8bbe0d84474237b5f7b052682f3b60b8d6a3d80a8b64cb9f9f4205f4ece0a 742180 php8.4-mongodb_2.0.0-1+deb13u1_amd64.deb
Files:
 ede2c433d2526a0bd59235ba4f8944df 7574 php optional php-mongodb_2.0.0-1+deb13u1_amd64-buildd.buildinfo
 2980e03ff22f109994510d75ea03f23a 3422548 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_amd64.deb
 d97e0f0beb55a8bb6b040f6bf71da2f7 742180 php optional php8.4-mongodb_2.0.0-1+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=5nCS
-----END PGP SIGNATURE-----