-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 15:28:53 -0500
Source: libmongocrypt
Binary: libmongocrypt-dev libmongocrypt0 libmongocrypt0-dbgsym
Architecture: armhf
Version: 1.13.2-1+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: armhf Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libmongocrypt-dev - client-side field level encryption library - dev files
 libmongocrypt0 - client-side field level encryption library - runtime files
Changes:
 libmongocrypt (1.13.2-1+deb13u2) trixie; urgency=medium
 .
   * Fix CVE-2026-84962: authenticated KMS request forgery via CRLF injection
     in GCP key identifier strings
   * Fix CVE-2026-84971: reject undersized ciphertext before allocating
     plaintext
   * Fix CVE-2026-106429: application denial of service via malformed KMS
     endpoint
   * Fix CVE-2026-106434: unrecognized payload acceptance in explicit decryption
   * Fix CVE-2026-106433: heap corruption via duplicate masterKey fields
   * Fix CVE-2026-114655: KMS request injection via unsanitized key vault and
     provider values
Checksums-Sha1:
 5209c72005bb1731202b7ab643429776690a9d55 321628 libmongocrypt-dev_1.13.2-1+deb13u2_armhf.deb
 624b36292b8635dd7725388fd87ee34053dd97f5 803616 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_armhf.deb
 7e051e9cedeb5197bf8309256155181a5b3a0853 1378696 libmongocrypt0_1.13.2-1+deb13u2_armhf.deb
 7a1b314338f3bea615093981c6cc2b707b2919ec 7554 libmongocrypt_1.13.2-1+deb13u2_armhf-buildd.buildinfo
Checksums-Sha256:
 3ea1e114ae40f30815d7d9c295f92d98f20ae161d1293b67c0e993b45560e45b 321628 libmongocrypt-dev_1.13.2-1+deb13u2_armhf.deb
 1cbb6c1a0d301191030b9e72acf34a5aac983dd9f210f9a2efbac818006882d9 803616 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_armhf.deb
 b1883da96b04480a8066aa1364cea5695b9a444e863af5318c5bcf3a8a4cee88 1378696 libmongocrypt0_1.13.2-1+deb13u2_armhf.deb
 87333c0f82c26fa51fe7eec6c79f561744f5dbececac89f76c8ac21d22fdff80 7554 libmongocrypt_1.13.2-1+deb13u2_armhf-buildd.buildinfo
Files:
 b4f681a67b02afa8dc9d8d13fb4d515b 321628 libdevel optional libmongocrypt-dev_1.13.2-1+deb13u2_armhf.deb
 a4d68832c33b0a3a1eec579865d61068 803616 debug optional libmongocrypt0-dbgsym_1.13.2-1+deb13u2_armhf.deb
 681673e02fcc18fceaff53cb6c4e8260 1378696 libs optional libmongocrypt0_1.13.2-1+deb13u2_armhf.deb
 b6ae738fca29e1f95f948c8ae7278168 7554 libs optional libmongocrypt_1.13.2-1+deb13u2_armhf-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=sQdT
-----END PGP SIGNATURE-----