docker-registry (2.8.3+ds1-3) unstable; urgency=medium

  * Team upload.

  [ Reinhard Tartler ]
  * Backport CVE fixes from upstream 3.1.1
    - CVE-2026-33540: bind proxy-mode bearer realms to the upstream trust
      boundary so credentials are never sent to an attacker-controlled
      realm. Closes: #1134567
    - CVE-2026-35172: fully revoke repository-scoped blob descriptors in
      the Redis cache so deleted blobs cannot be resurrected from stale
      cache entries. Closes: #1134567
    - Add golang-golang-x-net-dev build dependency for
      golang.org/x/net/publicsuffix

  [ Luca Boccassi ]
  * Install and use sysusers.d/tmpfiles.d configuration files in place
    of the manual docker-registry.postinst maintainer script.

 -- Reinhard Tartler <siretart@tauware.de>  Sun, 02 Aug 2026 12:23:44 +0200

docker-registry (2.8.3+ds1-2) unstable; urgency=medium

  * Team upload.
  * Remove Arnaud and Tim from Uploaders field
  * Normalize fields with wrap-and-sort
  * Add missing dependency on golang-github-distribution-reference-dev

 -- Reinhard Tartler <siretart@tauware.de>  Mon, 02 Sep 2024 07:25:27 -0400

docker-registry (2.8.3+ds1-1) unstable; urgency=medium

  * Team upload
  * New upstream release: 2.8.3
  * Provide an empty htpasswd file, Closes: #102338
  * Depend on golang-distribution-reference-dev
  * Avoid depends on deprecated 'lsb-base'
  * Skip flaky TestDeleteOnlyDeletesSubpaths, Closes: #1078495
  * Bump Standards-Version

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 31 Aug 2024 07:46:08 -0400

docker-registry (2.8.2+ds1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 2.8.2+ds1
    + CVE-2023-2253: Catalog API endpoint can lead to OOM via malicious user
      input (Closes: #1035956)
  * Drop patch merged by upstream
    + 0009-Fix-panic-in-inmemory-driver.patch

 -- Shengjing Zhu <zhsj@debian.org>  Sat, 13 May 2023 23:21:12 +0800

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog golang-github-docker-distribution-dev`.
