-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 15:28:53 -0500
Source: libmongocrypt
Binary: libmongocrypt-dev libmongocrypt0 libmongocrypt0-dbgsym
Architecture: arm64
Version: 1.13.2-1+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: arm64 Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libmongocrypt-dev - client-side field level encryption library - dev files
 libmongocrypt0 - client-side field level encryption library - runtime files
Changes:
 libmongocrypt (1.13.2-1+deb13u2) trixie; urgency=medium
 .
   * Fix CVE-2026-84962: authenticated KMS request forgery via CRLF injection
     in GCP key identifier strings
   * Fix CVE-2026-84971: reject undersized ciphertext before allocating
     plaintext
   * Fix CVE-2026-106429: application denial of service via malformed KMS
     endpoint
   * Fix CVE-2026-106434: unrecognized payload acceptance in explicit decryption
   * Fix CVE-2026-106433: heap corruption via duplicate masterKey fields
   * Fix CVE-2026-114655: KMS request injection via unsanitized key vault and
     provider values
Checksums-Sha1:
 bcb586292853b7c4725fb9cefe4dc134bc2cc4c1 342024 libmongocrypt-dev_1.13.2-1+deb13u2_arm64.deb
 27e348b4065a2ab84fe86a8a97d373c839ee3e52 802172 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_arm64.deb
 1a3925b217c16445e2113e84960b6bf92be4ad82 1345336 libmongocrypt0_1.13.2-1+deb13u2_arm64.deb
 563a2bc88f35e3ff0bba1782d561471a1055dbef 7672 libmongocrypt_1.13.2-1+deb13u2_arm64-buildd.buildinfo
Checksums-Sha256:
 cb7e2c244bb5036673e349cf7a59f8b0a1b78fd84ea444982ab875b04ae346ba 342024 libmongocrypt-dev_1.13.2-1+deb13u2_arm64.deb
 ae07b48682efeae898fd42082eb3bdfb8af1a415ad3c6d93cbde7f85a432f4a2 802172 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_arm64.deb
 047410767a2c1dc5db9d3cfbdbca387e502229523180945a593f8dda89b518f7 1345336 libmongocrypt0_1.13.2-1+deb13u2_arm64.deb
 a525856d6ce62f95973dd55e57bf57653060f412596e2dd6595addc0f7a37ee0 7672 libmongocrypt_1.13.2-1+deb13u2_arm64-buildd.buildinfo
Files:
 520f2621b2e24448a3232aaf134b4e0a 342024 libdevel optional libmongocrypt-dev_1.13.2-1+deb13u2_arm64.deb
 5ba6038a49c51ebc8feee1a881bfec9b 802172 debug optional libmongocrypt0-dbgsym_1.13.2-1+deb13u2_arm64.deb
 7acd6ab2730858f595612eaac4faa618 1345336 libs optional libmongocrypt0_1.13.2-1+deb13u2_arm64.deb
 7419a4d9c635ebcd1effcbfec1076854 7672 libs optional libmongocrypt_1.13.2-1+deb13u2_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=5osy
-----END PGP SIGNATURE-----