-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Nov 2026 15:28:53 -0500
Source: libmongocrypt
Binary: libmongocrypt-dev libmongocrypt0 libmongocrypt0-dbgsym
Architecture: i386
Version: 1.13.2-1+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Roberto C. Sanchez <roberto@connexer.com>
Description:
 libmongocrypt-dev - client-side field level encryption library - dev files
 libmongocrypt0 - client-side field level encryption library - runtime files
Changes:
 libmongocrypt (1.13.2-1+deb13u2) trixie; urgency=medium
 .
   * Fix CVE-2026-84962: authenticated KMS request forgery via CRLF injection
     in GCP key identifier strings
   * Fix CVE-2026-84971: reject undersized ciphertext before allocating
     plaintext
   * Fix CVE-2026-106429: application denial of service via malformed KMS
     endpoint
   * Fix CVE-2026-106434: unrecognized payload acceptance in explicit decryption
   * Fix CVE-2026-106433: heap corruption via duplicate masterKey fields
   * Fix CVE-2026-114655: KMS request injection via unsanitized key vault and
     provider values
Checksums-Sha1:
 9d45e3df74348e32f4d2735bcf630b12f7bf6c78 389384 libmongocrypt-dev_1.13.2-1+deb13u2_i386.deb
 efabc5c88396941953fb2ffc979e7ecdd00b9433 701208 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_i386.deb
 16b55987313b55155ce37b4f17665919132ede9e 1421632 libmongocrypt0_1.13.2-1+deb13u2_i386.deb
 950e0d581bdfb08056d60aaa87539d2841a58e33 7586 libmongocrypt_1.13.2-1+deb13u2_i386-buildd.buildinfo
Checksums-Sha256:
 271bb1c487a0df20fa621311901e475ed01818ac16fb7b905fd4282fbd34f2fa 389384 libmongocrypt-dev_1.13.2-1+deb13u2_i386.deb
 0d88b59fb9e04ef183ef8787f7aa01d828fbb95184ae426e4663d6cb56a07e69 701208 libmongocrypt0-dbgsym_1.13.2-1+deb13u2_i386.deb
 d0ae00c06a71f03826d97f6fa78ff6d5b2fac1e959ba41d485364528e791238e 1421632 libmongocrypt0_1.13.2-1+deb13u2_i386.deb
 bc6a7a677e6c22b12620568dad84a3ad498fe4c0ac8dbf9272e7fdaf21ad49f9 7586 libmongocrypt_1.13.2-1+deb13u2_i386-buildd.buildinfo
Files:
 5edfa78828d59d460842febb85276de0 389384 libdevel optional libmongocrypt-dev_1.13.2-1+deb13u2_i386.deb
 2f9e5b51932a7425400057fccc1da218 701208 debug optional libmongocrypt0-dbgsym_1.13.2-1+deb13u2_i386.deb
 8e4b45327a3289ed083384b20144ffa5 1421632 libs optional libmongocrypt0_1.13.2-1+deb13u2_i386.deb
 47d5384e9e167f50dba1482780177318 7586 libs optional libmongocrypt_1.13.2-1+deb13u2_i386-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmrzmV8ACgkQf2INRiCd
aWI4ZQ/9GjuxzZubqPVh/c2spZOFX/gmprqbDv+mqSl3SbXicWVEjlAkAryiyFQL
iAmf128B0gXCJYoa2kGO/buXtuZuRy0da4nmsniqHqQpJ6EEq3iDzs/CSkCWr4gc
fTznwX5IAtuWUeSYLMOZ6oUSnob+8eHphhad5wUN1/f8eg5hb+kE99VBeJ4rbJdR
4W7o8nKQMCxtddX2LMG89dKJkbXIvQd5LXG5Hqt+Ds1HoOVng5fvDYvjJ59DkgRd
fWGbmQ2W0vA5sqnjx1hV0YZn6XW0sY87pf4PmEnD1i6Gsa+hZITVGmI4J8t4mFeK
J9HVG32GwHoBhWCQENNMURqWuaquTvunPAHv/eVRJzCe8wV1hWc//ae/lZ1m6efM
yxo3Y+8Kizc8VgIudjPARe1+JwliT0MAU4dCvp7BVVG0/jWrvQGGfWGVMFAj4BOm
q37ui+puscYkkO+a5M8bPdTKAyrSbS0T9L7oAGoHQO2OogxnC6CvJsb0sLahthwm
fSnDCQpmJnun0gyJv1FjWjV8ABUSLMfUOpY8uL6vR7cw5iM8ceOQTns1b/6mS5IM
IePJY2fWAZ76QuZzopqqV5pgNJaSiAClnKW0R3HJYdttoOYkVdWlbebQzE2ISVUR
pa7apR8+XAOGdMKEMXTRLFNLLtw2orePiI9lRhfl4Oj/ZQvJeyM=
=QitE
-----END PGP SIGNATURE-----