-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 01 Oct 2026 08:25:18 +0200
Source: php-mongodb
Binary: php8.4-mongodb php8.4-mongodb-dbgsym
Architecture: s390x
Version: 2.0.0-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 php8.4-mongodb - MongoDB driver for PHP
Changes:
 php-mongodb (2.0.0-1+deb13u1) trixie-security; urgency=high
 .
   * PHPC-2744: Fix out-of-bounds read of field path
    + [CVE-2026-84968]: An out-of-bounds read in the BSON decoding
      component of the MongoDB PHP driver may allow an unauthenticated
      party who supplies specially formed input to have a small amount of
      adjacent process memory copied into an error message that is returned
      to application code. This may result in unintended disclosure of
      limited memory contents.
   * PHPC-2743: Fix __pclass inference in events
    + [CVE-2026-96745]: Deserialization of untrusted data in the command
      monitoring support of the MongoDB PHP Driver can cause class names
      embedded in document content to be honored when the driver builds
      monitoring event objects.
   * PHPC-2636: Respect libbson nesting limit when parsing PHP objects
    + [CVE-2026-6811]: Stack exhaustion vulnerability in the MongoDB PHP
      driver can cause application crashes when processing deeply nested
      BSON documents in unusual circumstances when the source of these BSON
      documents is not MongoDB Server.
Checksums-Sha1:
 ab84e5ee67f831c7bba60f0d60520f4b6caa0016 7436 php-mongodb_2.0.0-1+deb13u1_s390x-buildd.buildinfo
 818ce86857b49d4b82750cec84222e6ba2ab7f4d 3445920 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_s390x.deb
 aa6018a4cf2cd40481b913cf6d64ab8e0a4956cc 685296 php8.4-mongodb_2.0.0-1+deb13u1_s390x.deb
Checksums-Sha256:
 2bec4fb884e733aff856b607fa80675190c7892623658abdc16a40e84a2a4e6f 7436 php-mongodb_2.0.0-1+deb13u1_s390x-buildd.buildinfo
 1c648895dcb73d02fb08140cb1becf2527d0a9d39332d36a6886587305378560 3445920 php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_s390x.deb
 9b07e4331e662b31e9e5080285c8e1f2100d90055a8f0c3e86f6d75cadeb616c 685296 php8.4-mongodb_2.0.0-1+deb13u1_s390x.deb
Files:
 2db1c407f77af6077a49af2749b96012 7436 php optional php-mongodb_2.0.0-1+deb13u1_s390x-buildd.buildinfo
 f52cbd8a8e3a240b151fc6649e06c971 3445920 debug optional php8.4-mongodb-dbgsym_2.0.0-1+deb13u1_s390x.deb
 7da88a0c3571d05e00ddcb6569490692 685296 php optional php8.4-mongodb_2.0.0-1+deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=sERe
-----END PGP SIGNATURE-----