-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 15:28:53 -0500
Source: libmongocrypt
Binary: libmongocrypt-dev libmongocrypt0 libmongocrypt0-dbgsym
Architecture: armel
Version: 1.13.2-1+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libmongocrypt-dev - client-side field level encryption library - dev files
 libmongocrypt0 - client-side field level encryption library - runtime files
Changes:
 libmongocrypt (1.13.2-1+deb13u2) trixie; urgency=medium
 .
   * Fix CVE-2026-84962: authenticated KMS request forgery via CRLF injection
     in GCP key identifier strings
   * Fix CVE-2026-84971: reject undersized ciphertext before allocating
     plaintext
   * Fix CVE-2026-106429: application denial of service via malformed KMS
     endpoint
   * Fix CVE-2026-106434: unrecognized payload acceptance in explicit decryption
   * Fix CVE-2026-106433: heap corruption via duplicate masterKey fields
   * Fix CVE-2026-114655: KMS request injection via unsanitized key vault and
     provider values
Checksums-Sha1:
 a91d9f1a1ad7e65ac48c22fdf0b19c1ac13bd93d 317824 libmongocrypt-dev_1.13.2-1+deb13u2_armel.deb
 f59d5dd75a02519f389241e77d3ccd629e02aba7 799524 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_armel.deb
 684a04f50a76d9a2e51aaed8f6df7cef3621cb95 1374192 libmongocrypt0_1.13.2-1+deb13u2_armel.deb
 b4e9794528dd008377cab9174201683d52ee336d 7540 libmongocrypt_1.13.2-1+deb13u2_armel-buildd.buildinfo
Checksums-Sha256:
 52952542a1bb0343056c82ce7dea87c4caf859571f753307e91ef054dbc77955 317824 libmongocrypt-dev_1.13.2-1+deb13u2_armel.deb
 d1016d46508a884d6cf25803727b3f728845895a59a9d0f9ed4fdfd1da18708f 799524 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_armel.deb
 f0925b270155e6df3af942ec1c89cffdf654f4c8d7b589759e667e55045467c6 1374192 libmongocrypt0_1.13.2-1+deb13u2_armel.deb
 a0b8bbeab8049ada3274a1dd583b93fabefc62b401fa82d1d09060d5141eb6a9 7540 libmongocrypt_1.13.2-1+deb13u2_armel-buildd.buildinfo
Files:
 d45ddc0bbc93f7d1b282fea1185b8be8 317824 libdevel optional libmongocrypt-dev_1.13.2-1+deb13u2_armel.deb
 62094deb826bc44ea954a91a653b6824 799524 debug optional libmongocrypt0-dbgsym_1.13.2-1+deb13u2_armel.deb
 b2b9f7bf6d7d89df2a013a2c5573f04e 1374192 libs optional libmongocrypt0_1.13.2-1+deb13u2_armel.deb
 cce52d795440ec950fa4e875c1158d69 7540 libs optional libmongocrypt_1.13.2-1+deb13u2_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Hm4b
-----END PGP SIGNATURE-----