I'm pleased to announce versions 1.2.4 and 1.3.4 of libbson and libmongoc, the libraries constituting the MongoDB C Driver.

libbson

The new versions of libbson have no changes; they're released to keep pace with libmongoc.

libmongoc

The MongoDB C Driver releases fix a security vulnerability: when a mongoc_client_t uses SSL and is disconnected, it failed to re-verify the server certificate after reconnecting. This flaw affects single clients, not pooled ones.

Version 1.3.4 is the latest release and is recommended for all users. 1.2.4 is released only for users on the 1.2.x line who want an upgrade with minimal changes.

Thanks to everyone who contributed to this release.

  • A. Jesse Jiryu Davis
  • Hannes Magnusson
  • Remi Collet

Peace,
  — A. Jesse Jiryu Davis


Image: Henry Justice Ford, 1890