-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 15:28:53 -0500
Source: libmongocrypt
Binary: libmongocrypt-dev libmongocrypt0 libmongocrypt0-dbgsym
Architecture: ppc64el
Version: 1.13.2-1+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-conova-02) <buildd_ppc64el-ppc64el-conova-02@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libmongocrypt-dev - client-side field level encryption library - dev files
 libmongocrypt0 - client-side field level encryption library - runtime files
Changes:
 libmongocrypt (1.13.2-1+deb13u2) trixie; urgency=medium
 .
   * Fix CVE-2026-84962: authenticated KMS request forgery via CRLF injection
     in GCP key identifier strings
   * Fix CVE-2026-84971: reject undersized ciphertext before allocating
     plaintext
   * Fix CVE-2026-106429: application denial of service via malformed KMS
     endpoint
   * Fix CVE-2026-106434: unrecognized payload acceptance in explicit decryption
   * Fix CVE-2026-106433: heap corruption via duplicate masterKey fields
   * Fix CVE-2026-114655: KMS request injection via unsanitized key vault and
     provider values
Checksums-Sha1:
 26d4a00103ade98d866085417940699e9440db97 387228 libmongocrypt-dev_1.13.2-1+deb13u2_ppc64el.deb
 c96b032a4290b318d56a0e13bcda0c444bddb0aa 823104 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_ppc64el.deb
 2ead6ef61c75af70d03704c0a78f73ed0a19b7bd 1388288 libmongocrypt0_1.13.2-1+deb13u2_ppc64el.deb
 af1754a80c79754792c9de98508e1653030dd5b3 7693 libmongocrypt_1.13.2-1+deb13u2_ppc64el-buildd.buildinfo
Checksums-Sha256:
 5aaee8232266caaaa63a7d737a7f06377c267a2e569b3882b745be42914f1257 387228 libmongocrypt-dev_1.13.2-1+deb13u2_ppc64el.deb
 735bcc9294799b942a18c79a7fa6ea12d67c54f5c9c488e20bac28f79dd62ffb 823104 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_ppc64el.deb
 5acd50583cad29783f1f5b536fb717678628642af154d512e31b4e22b3ab5083 1388288 libmongocrypt0_1.13.2-1+deb13u2_ppc64el.deb
 8476010166891280db81231e505029a414b943427feec9ff51b01a864611ddab 7693 libmongocrypt_1.13.2-1+deb13u2_ppc64el-buildd.buildinfo
Files:
 51e8e7deb6bf30367668023b4bd149ae 387228 libdevel optional libmongocrypt-dev_1.13.2-1+deb13u2_ppc64el.deb
 9a32b2f61e31f7069c7f3cde68d92058 823104 debug optional libmongocrypt0-dbgsym_1.13.2-1+deb13u2_ppc64el.deb
 8a83c7d14a2f88d4cad757d2569a3aab 1388288 libs optional libmongocrypt0_1.13.2-1+deb13u2_ppc64el.deb
 b078da564ae95340a6d5acd5c4c46261 7693 libs optional libmongocrypt_1.13.2-1+deb13u2_ppc64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=jVhq
-----END PGP SIGNATURE-----