diff -Nru mongodb-2.4.10/debian/changelog mongodb-2.4.10/debian/changelog
--- mongodb-2.4.10/debian/changelog	2014-11-10 19:22:20.000000000 +0000
+++ mongodb-2.4.10/debian/changelog	2015-03-09 21:25:16.000000000 +0000
@@ -1,3 +1,9 @@
+mongodb (1:2.4.10-5) unstable; urgency=high
+
+  * Use upstream backported fix for CVE-2015-1609 (closes: #780129).
+
+ -- Laszlo Boszormenyi (GCS) <gcs@debian.org>  Mon, 09 Mar 2015 21:21:24 +0000
+
 mongodb (1:2.4.10-4) unstable; urgency=high
 
   * Backport potential information leak security fix from 2.4.11 .
diff -Nru mongodb-2.4.10/debian/patches/3a7e85ea1f672f702660e5472566234b1d19038e.patch mongodb-2.4.10/debian/patches/3a7e85ea1f672f702660e5472566234b1d19038e.patch
--- mongodb-2.4.10/debian/patches/3a7e85ea1f672f702660e5472566234b1d19038e.patch	1970-01-01 00:00:00.000000000 +0000
+++ mongodb-2.4.10/debian/patches/3a7e85ea1f672f702660e5472566234b1d19038e.patch	2015-03-09 21:20:02.000000000 +0000
@@ -0,0 +1,53 @@
+From 3a7e85ea1f672f702660e5472566234b1d19038e Mon Sep 17 00:00:00 2001
+From: Eliot Horowitz <eliot@10gen.com>
+Date: Wed, 11 Feb 2015 22:12:37 -0500
+Subject: [PATCH] SERVER-17264: improve bson validation for utf-8 strings
+
+(cherry picked from commit 394a8569ff14a215c0691aa34440227b2e62a4de)
+
+Conflicts:
+	src/mongo/bson/bson_validate_test.cpp
+---
+ src/mongo/bson/bson_validate.cpp      |  5 +++++
+ src/mongo/bson/bson_validate_test.cpp | 14 ++++++++++++++
+ 2 files changed, 19 insertions(+)
+
+diff --git a/src/mongo/bson/bson_validate.cpp b/src/mongo/bson/bson_validate.cpp
+index 9ac0bcb..a7c95ad 100644
+--- a/src/mongo/bson/bson_validate.cpp
++++ b/src/mongo/bson/bson_validate.cpp
+@@ -62,6 +62,11 @@ namespace mongo {
+                 if ( !readNumber<int>( &sz ) )
+                     return Status( ErrorCodes::InvalidBSON, "invalid bson" );
+ 
++                if ( sz <= 0 ) {
++                    // must have NULL at the very least
++                    return Status( ErrorCodes::InvalidBSON, "invalid bson");
++                }
++
+                 if ( out ) {
+                     *out = StringData( _buffer + _position, sz );
+                 }
+diff --git a/src/mongo/bson/bson_validate_test.cpp b/src/mongo/bson/bson_validate_test.cpp
+index 61e67f3..a36dbc5 100644
+--- a/src/mongo/bson/bson_validate_test.cpp
++++ b/src/mongo/bson/bson_validate_test.cpp
+@@ -213,4 +213,18 @@ namespace {
+         ASSERT_NOT_OK(validateBSON(x.objdata(), x.objsize() / 2));
+     }
+ 
++    TEST(BSONValidateFast, StringHasSomething) {
++        BufBuilder bb;
++        BSONObjBuilder ob(bb);
++        bb.appendChar(String);
++        bb.appendStr("x", /*withNUL*/true);
++        bb.appendNum(0);
++        const BSONObj x = ob.done();
++        ASSERT_EQUALS(5 // overhead
++                      + 1 // type
++                      + 2 // name
++                      + 4 // size
++                      , x.objsize());
++        ASSERT_NOT_OK(validateBSON(x.objdata(), x.objsize()));
++    }
+ }
diff -Nru mongodb-2.4.10/debian/patches/series mongodb-2.4.10/debian/patches/series
--- mongodb-2.4.10/debian/patches/series	2014-11-10 19:19:57.000000000 +0000
+++ mongodb-2.4.10/debian/patches/series	2015-03-09 21:21:17.000000000 +0000
@@ -17,3 +17,4 @@
 cefb0ef38f050b73b2bf8211add55f3749753e0a.patch
 8b9242837510e6410ddcf4f19969da4c7b01b2f7.patch
 656f78711632a5dc37221422c99e3c4619bcc58f.patch
+3a7e85ea1f672f702660e5472566234b1d19038e.patch