-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 16:12:33 -0500
Source: mongo-c-driver
Binary: libbson-1.0-0t64 libbson-1.0-0t64-dbgsym libbson-dev libmongoc-1.0-0t64 libmongoc-1.0-0t64-dbgsym libmongoc-dev
Architecture: s390x
Version: 1.30.4-1+deb13u5
Distribution: trixie
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libbson-1.0-0t64 - Library to parse and generate BSON documents - runtime files
 libbson-dev - Library to parse and generate BSON documents - dev files
 libmongoc-1.0-0t64 - MongoDB C client library - runtime files
 libmongoc-dev - MongoDB C client library - dev files
Changes:
 mongo-c-driver (1.30.4-1+deb13u5) trixie; urgency=medium
 .
   * Fix CVE-2026-84965: heap write primitive via size round-up wrap during JSON
     parsing on 32-bit builds
   * Fix CVE-2026-84963: silent field truncation via unchecked int cast of huge
     JSON string values in JSON-to-BSON parser
   * Fix CVE-2026-84964: heap corruption via OCSP request double free from
     crafted multi-URL certificate in TLS client
   * Fix CVE-2026-84969: heap overflow via truncated base64 encoding of binary
     fields in length-limited JSON output
   * Fix CVE-2026-88035: heap buffer overflow via wrapped size check during SASL
     username canonicalization
   * Fix CVE-2026-88036: GridFS data disclosure and deletion via query-operator
     injection in file IDs
   * Fix CVE-2026-93394: SCRAM nonce validation bypass
   * Fix CVE-2026-96746: heap buffer overflow via mid-scan command list growth
     in client topology monitoring
   * Fix CVE-2026-106428: out-of-bounds read in SCRAM authentication response
     parsing
   * Fix CVE-2026-106431: one-byte heap buffer overflow in BSON bulk document
     writer
   * Fix CVE-2026-106438: silent Decimal128 value corruption via incorrect
     exactness check
   * Fix CVE-2026-106437: out-of-bounds read and write via undersized BSON
     buffer reservation
   * Fix CVE-2026-120955: application abort on malformed GridFS metadata
   * Fix CVE-2026-120678: leaks the decompressed reply buffer when an
     OP_COMPRESSED reply fails to parse (denial of service)
   * Fix CVE-2026-120684: GridFS gap lets a shared writer recover a protected
     client's password
   * Fix CDRIVER-6401: abort in cursor namespace parsing when no dot separator
     (required by CVE-2026-120956 fix)
   * Fix CVE-2026-120956: remote abort and memory disclosure from a malformed
     cursor.ns
   * Fix CDRIVER-6523: mandate raising writeConcernError (change SHOULD to MUST)
     + this fixes a potential loss of data by ensuring that a WCE reported by
       the server is propagated rather than discarded
Checksums-Sha1:
 30b3d33b2d5e2ab6b92aabcbcfe3ba5c7f2267ba 325328 libbson-1.0-0t64-dbgsym_1.30.4-1+deb13u5_s390x.deb
 fb1dc624c923c6d1e77165ab60dd0ca608993486 90540 libbson-1.0-0t64_1.30.4-1+deb13u5_s390x.deb
 af659f19fef215f9758d67817ab0d14a15840e6b 153828 libbson-dev_1.30.4-1+deb13u5_s390x.deb
 d551d3b86f2a495d111fbec2e63428433d20c766 1695076 libmongoc-1.0-0t64-dbgsym_1.30.4-1+deb13u5_s390x.deb
 bbdad0f680cfcebd4203726e7922ea9ef8129bdc 373204 libmongoc-1.0-0t64_1.30.4-1+deb13u5_s390x.deb
 8b08c7e74b398e052273a5ffcd599c6fb0f1ac35 459428 libmongoc-dev_1.30.4-1+deb13u5_s390x.deb
 7ece7cfded68fc0fb96f482d529833db9750c140 10389 mongo-c-driver_1.30.4-1+deb13u5_s390x-buildd.buildinfo
Checksums-Sha256:
 b86afefa34e93175a9f08149b515238d196e2e61f9da8d713ebcd314ea221d9b 325328 libbson-1.0-0t64-dbgsym_1.30.4-1+deb13u5_s390x.deb
 c6eaf51b2f463de0b25d6aae8beb4ef0f8c60e17bee5aca5cce9a572af645916 90540 libbson-1.0-0t64_1.30.4-1+deb13u5_s390x.deb
 c2d39763189a9d520d3c26667e0a097474ba9d5d1db204167914552f87edd297 153828 libbson-dev_1.30.4-1+deb13u5_s390x.deb
 07467e01e570d31086ba14521993978d4e7549c6eb1e52a5e7978b2bc52fbedc 1695076 libmongoc-1.0-0t64-dbgsym_1.30.4-1+deb13u5_s390x.deb
 e735ccfecf96174411bf581b4e25049d2524f267d7bbcd3cc16188ce14e0064f 373204 libmongoc-1.0-0t64_1.30.4-1+deb13u5_s390x.deb
 5b42b9b7f1ed02dcfec0134f58b85401b22fbd08eb24ed7d070159340c555cf4 459428 libmongoc-dev_1.30.4-1+deb13u5_s390x.deb
 2b13ab0a25df9bade0b2c34f540dae1917ca8094f4ad366282dbee7f651c1531 10389 mongo-c-driver_1.30.4-1+deb13u5_s390x-buildd.buildinfo
Files:
 683746f34d0c0390c51c5a9c86cdcfb6 325328 debug optional libbson-1.0-0t64-dbgsym_1.30.4-1+deb13u5_s390x.deb
 d09d48e16e798c85905f8f5952d0ae78 90540 libs optional libbson-1.0-0t64_1.30.4-1+deb13u5_s390x.deb
 ede0332c9df1ef0fb784b64158d47ef6 153828 libdevel optional libbson-dev_1.30.4-1+deb13u5_s390x.deb
 8a0ec16f6e6bca168e5c6dfeb3434022 1695076 debug optional libmongoc-1.0-0t64-dbgsym_1.30.4-1+deb13u5_s390x.deb
 9a60ec481ed9330d8258515b62b9f562 373204 libs optional libmongoc-1.0-0t64_1.30.4-1+deb13u5_s390x.deb
 da1286281538dd32428ddf16442927b5 459428 libdevel optional libmongoc-dev_1.30.4-1+deb13u5_s390x.deb
 0d096590b32d509887b4d5890ce2a474 10389 libs optional mongo-c-driver_1.30.4-1+deb13u5_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=dur8
-----END PGP SIGNATURE-----