-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 15:28:53 -0500
Source: libmongocrypt
Binary: libmongocrypt-dev libmongocrypt0 libmongocrypt0-dbgsym
Architecture: s390x
Version: 1.13.2-1+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libmongocrypt-dev - client-side field level encryption library - dev files
 libmongocrypt0 - client-side field level encryption library - runtime files
Changes:
 libmongocrypt (1.13.2-1+deb13u2) trixie; urgency=medium
 .
   * Fix CVE-2026-84962: authenticated KMS request forgery via CRLF injection
     in GCP key identifier strings
   * Fix CVE-2026-84971: reject undersized ciphertext before allocating
     plaintext
   * Fix CVE-2026-106429: application denial of service via malformed KMS
     endpoint
   * Fix CVE-2026-106434: unrecognized payload acceptance in explicit decryption
   * Fix CVE-2026-106433: heap corruption via duplicate masterKey fields
   * Fix CVE-2026-114655: KMS request injection via unsanitized key vault and
     provider values
Checksums-Sha1:
 ddb80822053857dab1074c4744797028ed8acf97 342916 libmongocrypt-dev_1.13.2-1+deb13u2_s390x.deb
 a91112f5df0320624fa4b2cedf7c9ff3f98a446f 816760 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_s390x.deb
 707d6d1d0fe43996d736788dada84b251f31d3b0 1370784 libmongocrypt0_1.13.2-1+deb13u2_s390x.deb
 b5f8162b8802270d4de0a67394c182115cdd0054 7550 libmongocrypt_1.13.2-1+deb13u2_s390x-buildd.buildinfo
Checksums-Sha256:
 50f8f507eca9783904b819dfaaa5a94ac3623d4e050194b61cb0b2edf244933a 342916 libmongocrypt-dev_1.13.2-1+deb13u2_s390x.deb
 d396975d20d79b3ad34e462e8f13a57178bbc6a5c49d0e3143566d62a1bf6d40 816760 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_s390x.deb
 c16c25ae94cdb4ef6ca01731a702f0086409136a5941a93e23ac2f42dd971153 1370784 libmongocrypt0_1.13.2-1+deb13u2_s390x.deb
 d9d72f4e2e227e5cd8982833e5ef5d2530e8403c3e20b747bd8c2b3916f4cce0 7550 libmongocrypt_1.13.2-1+deb13u2_s390x-buildd.buildinfo
Files:
 2200e5d9535faee40bcb06d7783e7d77 342916 libdevel optional libmongocrypt-dev_1.13.2-1+deb13u2_s390x.deb
 01735c5072c2eeaa8ebb2d73695f9a0e 816760 debug optional libmongocrypt0-dbgsym_1.13.2-1+deb13u2_s390x.deb
 97e62dfc8184528ac77c2044d45572ba 1370784 libs optional libmongocrypt0_1.13.2-1+deb13u2_s390x.deb
 992059bf8f53877ddf1b675f17e524ee 7550 libs optional libmongocrypt_1.13.2-1+deb13u2_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Xqpg
-----END PGP SIGNATURE-----