-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 15:28:53 -0500
Source: libmongocrypt
Binary: libmongocrypt-dev libmongocrypt0 libmongocrypt0-dbgsym
Architecture: riscv64
Version: 1.13.2-1+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-manda-02) <buildd_riscv64-rv-manda-02@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libmongocrypt-dev - client-side field level encryption library - dev files
 libmongocrypt0 - client-side field level encryption library - runtime files
Changes:
 libmongocrypt (1.13.2-1+deb13u2) trixie; urgency=medium
 .
   * Fix CVE-2026-84962: authenticated KMS request forgery via CRLF injection
     in GCP key identifier strings
   * Fix CVE-2026-84971: reject undersized ciphertext before allocating
     plaintext
   * Fix CVE-2026-106429: application denial of service via malformed KMS
     endpoint
   * Fix CVE-2026-106434: unrecognized payload acceptance in explicit decryption
   * Fix CVE-2026-106433: heap corruption via duplicate masterKey fields
   * Fix CVE-2026-114655: KMS request injection via unsanitized key vault and
     provider values
Checksums-Sha1:
 ce363b6edeead3b055477bd246132ac84b6986ae 871732 libmongocrypt-dev_1.13.2-1+deb13u2_riscv64.deb
 8f359b638b8c690d09417d33702836783e75f8a3 788972 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_riscv64.deb
 924e748d2ca7d66f3054e7d8575cb3e371e49e65 1384820 libmongocrypt0_1.13.2-1+deb13u2_riscv64.deb
 970e1987d30ec6a616497596981650a6b7b29ee4 7638 libmongocrypt_1.13.2-1+deb13u2_riscv64-buildd.buildinfo
Checksums-Sha256:
 cd37b530b306cc37400686c8dc41d5a3ab075c98f428340fa5c7ae72dac9a5ef 871732 libmongocrypt-dev_1.13.2-1+deb13u2_riscv64.deb
 1dae6c143440f96887080e4866c5c116493c6455c5580063fbb461f969a23215 788972 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_riscv64.deb
 2659462314be34421af1a16674bb21f9278bf6ab724f0f40adf4c1dffe78c942 1384820 libmongocrypt0_1.13.2-1+deb13u2_riscv64.deb
 849203d00323a6b7da7ef106a6014468a20a325f87f2694ad27d3f375d9a6150 7638 libmongocrypt_1.13.2-1+deb13u2_riscv64-buildd.buildinfo
Files:
 f6072652d8da92af27e9f44a00344732 871732 libdevel optional libmongocrypt-dev_1.13.2-1+deb13u2_riscv64.deb
 bfb49cd0535834bc9ee883c6deed1cdc 788972 debug optional libmongocrypt0-dbgsym_1.13.2-1+deb13u2_riscv64.deb
 20b3dc07034050b9a3e77bbc1d2c8f7e 1384820 libs optional libmongocrypt0_1.13.2-1+deb13u2_riscv64.deb
 d51611990e8fa37e05e56121085f79b9 7638 libs optional libmongocrypt_1.13.2-1+deb13u2_riscv64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ycAc
-----END PGP SIGNATURE-----