-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 16:12:33 -0500
Source: mongo-c-driver
Binary: libbson-1.0-0t64 libbson-1.0-0t64-dbgsym libbson-dev libmongoc-1.0-0t64 libmongoc-1.0-0t64-dbgsym libmongoc-dev
Architecture: ppc64el
Version: 1.30.4-1+deb13u5
Distribution: trixie
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libbson-1.0-0t64 - Library to parse and generate BSON documents - runtime files
 libbson-dev - Library to parse and generate BSON documents - dev files
 libmongoc-1.0-0t64 - MongoDB C client library - runtime files
 libmongoc-dev - MongoDB C client library - dev files
Changes:
 mongo-c-driver (1.30.4-1+deb13u5) trixie; urgency=medium
 .
   * Fix CVE-2026-84965: heap write primitive via size round-up wrap during JSON
     parsing on 32-bit builds
   * Fix CVE-2026-84963: silent field truncation via unchecked int cast of huge
     JSON string values in JSON-to-BSON parser
   * Fix CVE-2026-84964: heap corruption via OCSP request double free from
     crafted multi-URL certificate in TLS client
   * Fix CVE-2026-84969: heap overflow via truncated base64 encoding of binary
     fields in length-limited JSON output
   * Fix CVE-2026-88035: heap buffer overflow via wrapped size check during SASL
     username canonicalization
   * Fix CVE-2026-88036: GridFS data disclosure and deletion via query-operator
     injection in file IDs
   * Fix CVE-2026-93394: SCRAM nonce validation bypass
   * Fix CVE-2026-96746: heap buffer overflow via mid-scan command list growth
     in client topology monitoring
   * Fix CVE-2026-106428: out-of-bounds read in SCRAM authentication response
     parsing
   * Fix CVE-2026-106431: one-byte heap buffer overflow in BSON bulk document
     writer
   * Fix CVE-2026-106438: silent Decimal128 value corruption via incorrect
     exactness check
   * Fix CVE-2026-106437: out-of-bounds read and write via undersized BSON
     buffer reservation
   * Fix CVE-2026-120955: application abort on malformed GridFS metadata
   * Fix CVE-2026-120678: leaks the decompressed reply buffer when an
     OP_COMPRESSED reply fails to parse (denial of service)
   * Fix CVE-2026-120684: GridFS gap lets a shared writer recover a protected
     client's password
   * Fix CDRIVER-6401: abort in cursor namespace parsing when no dot separator
     (required by CVE-2026-120956 fix)
   * Fix CVE-2026-120956: remote abort and memory disclosure from a malformed
     cursor.ns
   * Fix CDRIVER-6523: mandate raising writeConcernError (change SHOULD to MUST)
     + this fixes a potential loss of data by ensuring that a WCE reported by
       the server is propagated rather than discarded
Checksums-Sha1:
 9a5970c21cf0418402d1955ffdbefd78bbd3caba 320668 libbson-1.0-0t64-dbgsym_1.30.4-1+deb13u5_ppc64el.deb
 3ae3c4a09a3457902c917be85f61584986ab3cba 95820 libbson-1.0-0t64_1.30.4-1+deb13u5_ppc64el.deb
 aab067e2fcda34622e33c61194eabca513547b78 163092 libbson-dev_1.30.4-1+deb13u5_ppc64el.deb
 f3af994e2358bed21396b8d03f03e52bf6f141c3 1701800 libmongoc-1.0-0t64-dbgsym_1.30.4-1+deb13u5_ppc64el.deb
 af649de859d578e40f7228f90427e813a5b2fab8 423908 libmongoc-1.0-0t64_1.30.4-1+deb13u5_ppc64el.deb
 a0cafc71dfaa325b9fe472da0ffb9b33c8fed31b 533688 libmongoc-dev_1.30.4-1+deb13u5_ppc64el.deb
 72fc4d7539adc3ceef5a7655df8cae07789afa9b 10550 mongo-c-driver_1.30.4-1+deb13u5_ppc64el-buildd.buildinfo
Checksums-Sha256:
 bd8793b067991d2005e6b84db71f70e3f2325b6ca877085b09260a89a1894abe 320668 libbson-1.0-0t64-dbgsym_1.30.4-1+deb13u5_ppc64el.deb
 9a5620c21ed08ea746d9357892aeb9cba668eeb3dda18e7d4d39eba7212e0bce 95820 libbson-1.0-0t64_1.30.4-1+deb13u5_ppc64el.deb
 415c69817274a5e1c3f3826876ab65729318fd1383aef27538f987024a531799 163092 libbson-dev_1.30.4-1+deb13u5_ppc64el.deb
 a3dbb18c8f6a3bbd66173d7b0204fbd8eac69562be1041ff70305b9d04e91dac 1701800 libmongoc-1.0-0t64-dbgsym_1.30.4-1+deb13u5_ppc64el.deb
 ab785652edf539efe64da03be80109aa1d3d82cbd4cafdb4a3ce52d32917f3e3 423908 libmongoc-1.0-0t64_1.30.4-1+deb13u5_ppc64el.deb
 ec0ea8a76471abd6d8888de082d113790cee64ecfd00e7ff34c7a80c07c18e56 533688 libmongoc-dev_1.30.4-1+deb13u5_ppc64el.deb
 ffad6f10d6d015ae10253ebb73e6e293b1f6df08939f19c8742e6a486f5a0e76 10550 mongo-c-driver_1.30.4-1+deb13u5_ppc64el-buildd.buildinfo
Files:
 15a67ac73f256aa8615b4a4512e84992 320668 debug optional libbson-1.0-0t64-dbgsym_1.30.4-1+deb13u5_ppc64el.deb
 6f05e50a7e79bb7554c9011b5aec7c38 95820 libs optional libbson-1.0-0t64_1.30.4-1+deb13u5_ppc64el.deb
 f3a1605784c383a7ffe7ac7052ce4805 163092 libdevel optional libbson-dev_1.30.4-1+deb13u5_ppc64el.deb
 20c25cd6fb784254c9ee31770f04650d 1701800 debug optional libmongoc-1.0-0t64-dbgsym_1.30.4-1+deb13u5_ppc64el.deb
 c373d60d01461b25282008be13201ce7 423908 libs optional libmongoc-1.0-0t64_1.30.4-1+deb13u5_ppc64el.deb
 4402407fd60c320e936fd613c5b0da19 533688 libdevel optional libmongoc-dev_1.30.4-1+deb13u5_ppc64el.deb
 c84bf8b7fe6a335eb1540af402b8fbe5 10550 libs optional mongo-c-driver_1.30.4-1+deb13u5_ppc64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=dWpx
-----END PGP SIGNATURE-----