-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 25 Oct 2026 19:36:57 +0100 Source: php-mongodb Architecture: source Version: 2.0.0-1+deb13u2 Distribution: trixie-security Urgency: high Maintainer: Debian PHP PECL Maintainers <[email protected]> Changed-By: Ondřej Surý <[email protected]> Changes: php-mongodb (2.0.0-1+deb13u2) trixie-security; urgency=high . * Backported from 2.1.11: + [CVE-2026-106432]: Bound-check string and binary lengths in BSON encoder + [CVE-2026-106436]: Check libbson append return values in BSON encoder * Backported from 2.1.12: + [CVE-2026-112368]: Prevent stack exhaustion when decoding deeply nested BSON Checksums-Sha1: 2c62da3032656a1c0f986437085779dd980791c5 2408 php-mongodb_2.0.0-1+deb13u2.dsc b7960c0671e928a07c8d60b4b4a3cb0823617239 2109177 php-mongodb_2.0.0.orig.tar.gz fc15d8d16f107cd066ac05687ea076f8f4472c16 24636 php-mongodb_2.0.0-1+deb13u2.debian.tar.xz beea0f047f5f6e4dcb05fa054922db7f195ecc24 8555 php-mongodb_2.0.0-1+deb13u2_amd64.buildinfo Checksums-Sha256: 242c0aaceb4c5f22366f419c5cfe3ba4477bfbe0b5464103db06dd6b8a8070f0 2408 php-mongodb_2.0.0-1+deb13u2.dsc 6a53987a5e75fc65d032ac93cc8d4522a5cd06e068828e6b6e12612597fc88df 2109177 php-mongodb_2.0.0.orig.tar.gz f4bde65e9f76b5daac88c851b22a423d7077bda7f23605c36f42bdb0d218aad1 24636 php-mongodb_2.0.0-1+deb13u2.debian.tar.xz 2cc91d52575f8f9a20e165f8445e77b3b243c4fd18f70d367b9dd6bff2bad3d2 8555 php-mongodb_2.0.0-1+deb13u2_amd64.buildinfo Files: 59c4eb5fe01a41f5ac2f72934c25deb6 2408 php optional php-mongodb_2.0.0-1+deb13u2.dsc 792a1acdc4e247cf5c8dad0f3b12b931 2109177 php optional php-mongodb_2.0.0.orig.tar.gz 6ff89aca545c7687a692c579e594b718 24636 php optional php-mongodb_2.0.0-1+deb13u2.debian.tar.xz d84a2d0562445b7b83a839f9728bca78 8555 php optional php-mongodb_2.0.0-1+deb13u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmreTcFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u WcLZMg/+KDXa/m3v4mEYkOmXniQNLjdNyMEBYXaF3dnI0fC+xArE5RBL/f5hj7BT 9jE8djERjKb2J18tDhdm/Sdd7fqTlBqvhwcACHxCfWBVmf/8UeMu6GwXovo2ri/W +zQAhgTwCN9wSpYGMFti9Nw+G6m6yHvVBLDNzDi0frulHQlFV+JeHgLQ2h+3lRxX XLxeIP4tV4MdzPl9Ty1/E7rXMu3ZIenRSFne5AMKHYgHhU/CXT/RJOQjqamocYXN 5kg5WCdrD5Vcj8nbROyi5mjxy/yz/rNzeelLeXhWDtbc4sMCKB6bc1m6fPfhFxGZ ybrasAl5WAMoEL5XNABTvbZHAflp0YYNu8D1WR53+Ln9Y16P/UM+nLqr9xpjSqIu 62kWgGQz0iEn4N01RDCGmtiv6QC8/UcFtnSY9QwUvU+/yjEiStnjEX5oZCJllTha NmHEYm3gKjyZp+ykCJzKvopJ5cec7MTdVTnyHwyiei5jVrTlTlUcglUwF7RRC0bk +vWoUq1aEQbhagMm+oYiIUh5hNAHrmgicQCj1uXMnH52R/uANy77s3c7QiiIuJXc nMoF7CXPE3JYK7QrorwVbPRE/2gI76Ye4xJXYdf9QWI+VTzjinNYYJNK9X7YkVRK xTJElEjExrxwNfwSrqRmmnRZNHX3WUP6gUTWQuJY1MA2wxSq+x0= =6+1T -----END PGP SIGNATURE-----
pgp0luzoagiuT.pgp
Description: PGP signature
