Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.announce.security > #5108

[SECURITY] [DSA 6539-1] php-mongodb security update

Show all headers | View raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6539-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
October 02, 2026                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : php-mongodb
CVE ID         : CVE-2026-6811 CVE-2026-84968 CVE-2026-96745

Multiple security vulnerabilities have been discovered in the MongoDB
driver for PHP, which could result in information disclosure, PHP
objection injection or denial of service.

For the stable distribution (trixie), these problems have been fixed in
version 2.0.0-1+deb13u1.

We recommend that you upgrade your php-mongodb packages.

For the detailed security status of php-mongodb please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/php-mongodb

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmq/8s0ACgkQEMKTtsN8
TjZGTQ//YKRRqWMyB1QGkuqwl//ZgixHNcSIzyHpDfwm/DB2C6YOIMq2Gg8t4OfG
BIrvZfaFfJVuUvZqjutgKoAS5f8Q78enfsQ3t5R4hl5pHlehkCnFdVXVAkZgkhNT
GvO+cq1OyoCLaIipib2ipMHhnNW347pJvFGroGOdMirgVm91u8QZxSYmIgWFhB4+
BS815pUc+CzOiJyK8QYiQWyJZDlinOXraXt848DKjtdjO+Kiner7TI+MkUKPrzPm
cxi35hy72Imix9OHcLhsFujxKhBiTh/ZOmjmw53DWRadGKfCcx4ZnKqj1IminbAO
a4hrJLozgat3wuEHScIi6Fr/jYXgE+Ar+W19Uv2gTOGXs+NiU4voOljlXv0tgNJ+
TYJ0bmIl5Lxqdp/OVbk/QvU7Wj8WVxt1bbRB42znzb3I0S6Vc12mF/Vd2F7GG1oU
f+afMq0Xqa91/E0hsLko6QDLNfAuZSvhpxw5bpv4T9evaOAx9xuOJKeERNzX9PHT
bY6jArjAIw8EeS4uvRyGVLgO5dFm63NP6L/GZ+OdFAV6DHuCThyoPWJ7QGIwQ2SA
ZeesVvzESAtS0denDqA+Q77ly4BlCbnp4UJIqJjmpqW0OXHMWQ1u9Q7t3/Zad4ft
j0eD4clTk72mioBNIaVyaGqX0tCOpKDfhOmZm+pPDdd7EHVkv0M=
=Jmrf
-----END PGP SIGNATURE-----

Back to linux.debian.announce.security | Previous | Next | Find similar | Unroll thread

Thread

[SECURITY] [DSA 6539-1] php-mongodb security update Moritz Muehlenhoff <jmm@debian.org> - 2026-10-02 20:10 +0200

csiph-web