-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:25:18 +0200
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: i386
Version: 2.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u1) trixie-security; urgency=high
 .
   * PHPC-2744: Fix out-of-bounds read of field path
    + [CVE-2026-84968]: An out-of-bounds read in the BSON decoding
      component of the MongoDB PHP driver may allow an unauthenticated
      party who supplies specially formed input to have a small amount of
      adjacent process memory copied into an error message that is returned
      to application code. This may result in unintended disclosure of
      limited memory contents.
   * PHPC-2743: Fix __pclass inference in events
    + [CVE-2026-96745]: Deserialization of untrusted data in the command
      monitoring support of the MongoDB PHP Driver can cause class names
      embedded in document content to be honored when the driver builds
      monitoring event objects.
   * PHPC-2636: Respect libbson nesting limit when parsing PHP objects
    + [CVE-2026-6811]: Stack exhaustion vulnerability in the MongoDB PHP
      driver can cause application crashes when processing deeply nested
      BSON documents in unusual circumstances when the source of these BSON
      documents is not MongoDB Server.
Checksums-Sha1:
 0d87ba6372a42bbfbfbc04c9aff617f459622499 7475 php-mongodb_2.0.0-1+deb13u1_i386-buildd.buildinfo
 3178205e3100bad10c62b5249eb5b574147411f9 2949084 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_i386.deb
 4e4fd6e3713c6da5c46391b77713c71148c3d8a9 809424 php8.4-mongodb_2.0.0-1+deb13u1_i386.deb
Checksums-Sha256:
 d5836fa9ab6858be1859fae74c988436063a53170b1912a7b12a1a7c7e8e345e 7475 php-mongodb_2.0.0-1+deb13u1_i386-buildd.buildinfo
 365711c78a5e0cba9cd1203aab71835bf26d98a38f022540ba53f454b253e1bb 2949084 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_i386.deb
 a95405e8ae6fda4285e9d965716ace5c7636c87539b17981574f66fe20b1ebd3 809424 php8.4-mongodb_2.0.0-1+deb13u1_i386.deb
Files:
 d195fc917ee61cdcf1e730b56008fc26 7475 php optional php-mongodb_2.0.0-1+deb13u1_i386-buildd.buildinfo
 aeb9aadb8d313b54e58e416c8e0daaf7 2949084 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_i386.deb
 df277d090e3bef87fbc0b1707717bd78 809424 php optional php8.4-mongodb_2.0.0-1+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmq+RE0ACgkQYg9P9sm2
dfGYZQ//ZX1h5M3itWcNTIMOfpLETY8wYIaXCmc/jfB6rxDvpzOUIeo0SzW5UfsF
50YDT7VBwa8hq46ZWANjUePy4FKGOWxiT92EbWTi4B6sdayz70hJqT3fJ14iLdnB
FTxOTnnmQFgjxiMII9kgWIlBqJs9JUeKJWSU3jFC6H9nn+nKAwDTl4mzGFoQzbxC
srWqrre1n9J3cxLRPtF2OvVm/l1zRTRw0kICF7yUGNusH5dg1Qxap+jj+xc5Tv4N
QdLnNsLVSZgkkaDVsr0V5J36fvm9OtbYGXhvniA7Ere7SHZq3MqLCKZf9A/HDwJS
ySL5Q+5xZt8sXmHVaMmNBVBcpDVOvx7TmEX/DbMjsmym05azbVkrWK9Q+S4oEOY8
i60pRaUSpYyXecc0lz+yNH64YhCTyDuhhNBmVsUqCq/GCfCaXKJdYNwXdfRopdPe
WKplHINboT2izN7byZ8wUa/LX2ERUKMNlss73q+5ZMCKIbFLvwe8S6VXqsUwFisw
QjJ2I3VPLdv+H4f8DCVYDJEP0kTE4UCZZ1U1RoGGD9KWys0KyNelWs/dATFCY3T/
vgtAega18GbS8cItsrNu2mfDX7VILJbjNgtvv3zuTQsCY/RAcSYu9mDza36GfQxo
+22Q4CPsuC48G92iVU9XcgAoNxu3BRxp4v7mDjs7Sf2MaBifMKY=
=noSI
-----END PGP SIGNATURE-----