-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:25:18 +0200
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: riscv64
Version: 2.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-02) <buildd_riscv64-rv-manda-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u1) trixie-security; urgency=high
 .
   * PHPC-2744: Fix out-of-bounds read of field path
    + [CVE-2026-84968]: An out-of-bounds read in the BSON decoding
      component of the MongoDB PHP driver may allow an unauthenticated
      party who supplies specially formed input to have a small amount of
      adjacent process memory copied into an error message that is returned
      to application code. This may result in unintended disclosure of
      limited memory contents.
   * PHPC-2743: Fix __pclass inference in events
    + [CVE-2026-96745]: Deserialization of untrusted data in the command
      monitoring support of the MongoDB PHP Driver can cause class names
      embedded in document content to be honored when the driver builds
      monitoring event objects.
   * PHPC-2636: Respect libbson nesting limit when parsing PHP objects
    + [CVE-2026-6811]: Stack exhaustion vulnerability in the MongoDB PHP
      driver can cause application crashes when processing deeply nested
      BSON documents in unusual circumstances when the source of these BSON
      documents is not MongoDB Server.
Checksums-Sha1:
 6b1d7be1258d03e2765481d55c80edf31c0dc1d6 7518 php-mongodb_2.0.0-1+deb13u1_riscv64-buildd.buildinfo
 2c838f87b253919bcc7b5df415ff908232c4ea57 3272060 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_riscv64.deb
 7b7795dc72fc6015067d83a75912c74d7a9fee4e 760960 php8.4-mongodb_2.0.0-1+deb13u1_riscv64.deb
Checksums-Sha256:
 902e9d38503a0e36799cccd8f94c7ddc355c40e75757fd64f38ea8d3f51e5e6a 7518 php-mongodb_2.0.0-1+deb13u1_riscv64-buildd.buildinfo
 530c26d6169c281d51c93ca6a0656890eea5c5eae89966f6ebd42dd4345f7844 3272060 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_riscv64.deb
 f8667d31d3f058290bbbf668489c3f28dd772b58c6eec43e654e71b1cdec38ac 760960 php8.4-mongodb_2.0.0-1+deb13u1_riscv64.deb
Files:
 0ae3306bdbc06c2b0f50578b214caba2 7518 php optional php-mongodb_2.0.0-1+deb13u1_riscv64-buildd.buildinfo
 0c5b2bb3ab0ec94a13cf8bc851ec6708 3272060 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_riscv64.deb
 8c3db44b3031d74d42089ee00cdfb2d9 760960 php optional php8.4-mongodb_2.0.0-1+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEER+evXFzNzDWbUDPF7SlJcp2g6OIFAmq+Cd8ACgkQ7SlJcp2g
6OJTDRAAr0ZxCwso2Y3EQnRGiFYSu9rkjZa3z8Jv+HXIhLop4CJUWUdwy7yMNrVm
G+shVcj+2+4dgg8DGgoUYhvhEAY3q1+MqGqIYh/y4kyovp2KP6lffQ7E/vpwbahI
p8/Lviaig33/6qgT2Rgbwxxi1LCCqLK4A64NwJElCg4Fd7GdxXTpCoVtWau1hd06
7zcYLp8SQddvXwtiBZbvNJgHqXi6kahtA6brJeAQiKRgzgqNocWjzWDHF98uBSoA
m4/GvUGvnAaLY6Pon9yThwpnh8B4a2yox96EorA2lGTgyK76Hj3QbHj5YSrfiwmu
3DaZxApfPUwmgtg6LuPbRk2SHBhG2rPOCp+/SoClELVMT7+2ocVpcFtqUHqyRyiI
T1TOCi2k1gKFZ9wZLwgtGSXsF72nkgxL5AJ+GOW/odiJw0IMbQtbQ5+rJl8EECyU
moOxWxpFUYkVHLDx2V31Q1SQlJrxZTbJ4nYl4pQTRHUgL1qkSVd3ItPABI6HW9b0
a8wV0geHH2BYEFV6qR8UczmF9ppzrij/uSqmdCjP7TpXbPdZT8krKvRyUe8YDzCN
tj3IoyalcSF6Bbv8LsSku/lad6t9z4d5wiL29lS89A36yL8HFFXDaHo2HyM15T7O
UAiDkoFgkfiJreI5IJUm7Etr1oNJw0aAcA2mvdhL5uA0cYecBPM=
=w5JV
-----END PGP SIGNATURE-----