Announcing 2.5.2 of libbson and libmongoc, the libraries constituting the MongoDB C Driver.
libbson
No changes since 2.5.1. Version incremented to match the libmongoc version.
libmongoc
Fixes
- Fix OCSP error handling. CVE-2026-84964
- Fix unsafe casts during JSON parsing. CVE-2026-84965
- Fix possible unsafe truncation when logging base64. CVE-2026-84969
- Fix unsafe calls to
bson_next_power_of_two. CVE-2026-84963