-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:25:18 +0200
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: armel
Version: 2.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u1) trixie-security; urgency=high
 .
   * PHPC-2744: Fix out-of-bounds read of field path
    + [CVE-2026-84968]: An out-of-bounds read in the BSON decoding
      component of the MongoDB PHP driver may allow an unauthenticated
      party who supplies specially formed input to have a small amount of
      adjacent process memory copied into an error message that is returned
      to application code. This may result in unintended disclosure of
      limited memory contents.
   * PHPC-2743: Fix __pclass inference in events
    + [CVE-2026-96745]: Deserialization of untrusted data in the command
      monitoring support of the MongoDB PHP Driver can cause class names
      embedded in document content to be honored when the driver builds
      monitoring event objects.
   * PHPC-2636: Respect libbson nesting limit when parsing PHP objects
    + [CVE-2026-6811]: Stack exhaustion vulnerability in the MongoDB PHP
      driver can cause application crashes when processing deeply nested
      BSON documents in unusual circumstances when the source of these BSON
      documents is not MongoDB Server.
Checksums-Sha1:
 ed6e7e23c8e17d71c984dcc68fc2f1bf609f6033 7426 php-mongodb_2.0.0-1+deb13u1_armel-buildd.buildinfo
 bedde4b104782061e46b1e0959b511c949aa2329 3311460 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_armel.deb
 aee698a80c21959f94a611a9206be6e0af5733e1 650684 php8.4-mongodb_2.0.0-1+deb13u1_armel.deb
Checksums-Sha256:
 74839c2fb290bb23270e7a35e8d0086251d2de18e8cda1bf0c4a62fd508285fd 7426 php-mongodb_2.0.0-1+deb13u1_armel-buildd.buildinfo
 8af5558760bfd986a9f7fa5ba139667630fa19cfee67c9a84b8729df8ca7cc42 3311460 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_armel.deb
 8fc395797ffd173f5bb385e066c0ccb472898b725819e83e7208937c457fc962 650684 php8.4-mongodb_2.0.0-1+deb13u1_armel.deb
Files:
 444b9edd370b57f6096143eadca183f6 7426 php optional php-mongodb_2.0.0-1+deb13u1_armel-buildd.buildinfo
 ae90e66a7304902abf70114958cf3da5 3311460 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_armel.deb
 6f7c9cb0f61fd7821d91004fc2607d7a 650684 php optional php8.4-mongodb_2.0.0-1+deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmq+B5wACgkQvzDqKQSG
l8Xwaw/+Ow4ZR8asXkHaNej+FDow8CCQgABdmmw3eph/rb8mIRxaUwo9AGGaiblL
nW0LYZoj247s9H3FQZ6N/QgMK3N5t4Ri+wJ4FbAkFV9sfcycdnVj/l1WJi0QPa/B
wlHS49WqYtFs4BY9RzskkmNofUlegncSqH8wcOZimrY4jXDfO25WEkRydbf3doqZ
ngSgy838qHwqgjFU7PhANjxjlzF/VqCbOJDM+fVpSf1BgQRt/J7MBHkhL6oPr9VY
FPAk/Pk3d+fmxhLmb2y4C0uaobSgH5M55Q1bShFmIEu2rAPmZ2o1lb2p13O/fPNZ
mu7WjnpEpLx0GNNfmpwktbMhTf9m0WpLeiR1OsYGJBUnhJicChQB9WLpBBL2Iy8H
hj2PSqSVzjVJBQCE/7rYmXBzmzrq4bz+5LAj6qJiTcV1qM9a8oN/oSwJdiPYDQ8Z
1cWXVcYPdT+duKIYTZiYLyDoTneBN3E8zn/Xp78ragzUPwd4oAX3jOaSTVnxuJye
nQTkVXeNs3uaT74NCh6e2fE+3yflAFbT6mrY4QndgKJojWltCaGTkFbhvH5a+jRK
w/84vq4pRyWNzazfyJq1PSeVvA21mBANvWob1f6iK552TZd5aAeVKsko9eRe8hhE
awPyHPEKlbtHxxGbeE4AouVwSQNpfN440aNfs/aYg376ABZUAjg=
=jMed
-----END PGP SIGNATURE-----