-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 15:28:53 -0500
Source: libmongocrypt
Binary: libmongocrypt-dev libmongocrypt0 libmongocrypt0-dbgsym
Architecture: amd64
Version: 1.13.2-1+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libmongocrypt-dev - client-side field level encryption library - dev files
 libmongocrypt0 - client-side field level encryption library - runtime files
Changes:
 libmongocrypt (1.13.2-1+deb13u2) trixie; urgency=medium
 .
   * Fix CVE-2026-84962: authenticated KMS request forgery via CRLF injection
     in GCP key identifier strings
   * Fix CVE-2026-84971: reject undersized ciphertext before allocating
     plaintext
   * Fix CVE-2026-106429: application denial of service via malformed KMS
     endpoint
   * Fix CVE-2026-106434: unrecognized payload acceptance in explicit decryption
   * Fix CVE-2026-106433: heap corruption via duplicate masterKey fields
   * Fix CVE-2026-114655: KMS request injection via unsanitized key vault and
     provider values
Checksums-Sha1:
 3eaf208e3ef7cab91b89893c4e896c14c40a505e 353840 libmongocrypt-dev_1.13.2-1+deb13u2_amd64.deb
 c2894698f9e44638b21021f30a1b9c2328c9427e 807872 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_amd64.deb
 1f49252244499c907d5af04976622167ef79b974 1374420 libmongocrypt0_1.13.2-1+deb13u2_amd64.deb
 696c708de0178b03842ac5daabb0b50428d35ed6 7688 libmongocrypt_1.13.2-1+deb13u2_amd64-buildd.buildinfo
Checksums-Sha256:
 156c13f1edf0fd3289acdcdf87dbb3ada2c545d38033c4b66cc619352e566887 353840 libmongocrypt-dev_1.13.2-1+deb13u2_amd64.deb
 0448105474f3b5236d4897a10d590d13ef5acdc09d1c6d017321f9c0960a4cc1 807872 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_amd64.deb
 cb11926633eb964474f48953761131591577a27114c5110011f9e6320a8e3464 1374420 libmongocrypt0_1.13.2-1+deb13u2_amd64.deb
 e4c79040e6583650f1f563380ea0b523277a9b8afe052034137b380fa25014f0 7688 libmongocrypt_1.13.2-1+deb13u2_amd64-buildd.buildinfo
Files:
 37a258c7135170372b21545040ec4545 353840 libdevel optional libmongocrypt-dev_1.13.2-1+deb13u2_amd64.deb
 8e3a210c8ad65e749db012ab2842f53b 807872 debug optional libmongocrypt0-dbgsym_1.13.2-1+deb13u2_amd64.deb
 152f6befecc5a56d920025ab07fe9f81 1374420 libs optional libmongocrypt0_1.13.2-1+deb13u2_amd64.deb
 ef7fcb067165ea4f52969214d58abff3 7688 libs optional libmongocrypt_1.13.2-1+deb13u2_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=fOh/
-----END PGP SIGNATURE-----