I'm pleased to announce versions 1.2.4 and 1.3.4 of libbson and libmongoc, the libraries constituting the MongoDB C Driver.


The new versions of libbson have no changes; they're released to keep pace with libmongoc.


The MongoDB C Driver releases fix a security vulnerability: when a mongoc_client_t uses SSL and is disconnected, it failed to re-verify the server certificate after reconnecting. This flaw affects single clients, not pooled ones.

Version 1.3.4 is the latest release and is recommended for all users. 1.2.4 is released only for users on the 1.2.x line who want an upgrade with minimal changes.

Thanks to everyone who contributed to this release.

  • A. Jesse Jiryu Davis
  • Hannes Magnusson
  • Remi Collet

  — A. Jesse Jiryu Davis

Image: Henry Justice Ford, 1890