golang-go.crypto (1:0.53.0-1) unstable; urgency=medium

  * Team upload
  * Bump upstream copyright years

 -- Simon Josefsson <simon@josefsson.org>  Fri, 12 Jun 2026 08:23:27 +0200

golang-go.crypto (1:0.52.0-1) unstable; urgency=medium

  * Team upload
  * New upstream (Closes: #1137516)
    - CVE-2026-39827 CVE-2026-39828 CVE-2026-39829 CVE-2026-39830
      CVE-2026-39831 CVE-2026-39832 CVE-2026-39833 CVE-2026-39834
      CVE-2026-39835 CVE-2026-42508 CVE-2026-46595 CVE-2026-46597
      CVE-2026-46598
  * Bump upstream copyright years

 -- Simon Josefsson <simon@josefsson.org>  Sun, 24 May 2026 22:57:56 +0200

golang-go.crypto (1:0.50.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 0.50.0
    - Refresh patches
  * Disable pristine-tar
  * Update Standards-Version to 4.7.4
  * Add passwd <!nocheck> to Build-Depends.
    This fixes the FTBFS of the package, although this fix is
    arguably only hiding a problem. It would be more correct to
    run the tests not at build time, but only at autopkgtest time
    where sshd can run in a more realistic environment.
    See https://bugs.debian.org/1129134 for more details.
    Also, note that https://bugs.debian.org/1125516 will probably
    get implemented for forky, which might cause a similar problem.
    (Closes: #1129122)

 -- Dr. Tobias Quathamer <toddy@debian.org>  Mon, 20 Apr 2026 22:01:36 +0200

golang-go.crypto (1:0.47.0-1) unstable; urgency=medium

  * Team upload

  [ Otto Kekäläinen ]
  * Salsa CI: Use standard template to have full Debian package builds etc

  [ Simon Josefsson ]
  * Drop test-ssh-agent-home.patch as upstream fixed it
  * Drop Priority: optional
  * Standards-Version: 4.7.3
  * Bump debian/* copyright years
  * Merge 1:0.46.0-1 from experimental and upload to unstable

 -- Simon Josefsson <simon@josefsson.org>  Mon, 02 Feb 2026 21:54:10 +0100

golang-go.crypto (1:0.46.0-1) experimental; urgency=medium

  * Team upload.
  * New upstream version 0.46.0.
  * debian/patches/test-ssh-agent-home.patch: refreshed.

 -- Andrew Lee (李健秋) <ajqlee@debian.org>  Thu, 18 Dec 2025 09:16:43 +0100

golang-go.crypto (1:0.45.0-1) unstable; urgency=medium

  * Team upload.
  * Drop s390x SHA3 workaround
  * New upstream version 0.45.0
    - Fix SSH Agent CVE-2025-47914 (Closes: #1121091)
    - Fix SSH GSSAPI CVE-2025-58181 (Closes: #1121092)

 -- Simon Josefsson <simon@josefsson.org>  Sat, 06 Dec 2025 22:45:30 +0100

golang-go.crypto (1:0.43.0-2) unstable; urgency=medium

  * Team upload.
  * Fix FTBFS on s390x.

 -- Simon Josefsson <simon@josefsson.org>  Sat, 18 Oct 2025 21:30:27 +0200

golang-go.crypto (1:0.43.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 0.43.0.  Closes: #1117749.
  * Use new path to bundle.der.
  * For self-tests, use ssh-agent -T.
  * Skip TestAgentForward that fails with modern OpenSSH.

 -- Simon Josefsson <simon@josefsson.org>  Sun, 12 Oct 2025 22:28:44 +0200

golang-go.crypto (1:0.42.0-4) unstable; urgency=medium

  * Team upload.
  * Ignore failing TestMarshalUnmarshal on s390x.
  * Fix CVE-2025-22869: SSH servers which implement file transfer
    protocols are vulnerable to a denial of service attack from
    clients which complete the key exchange slowly, or not at all,
    causing pending content to be read into memory, but never
    transmitted.  Resolved already in 0.35.0. Closes: #1098968.

 -- Simon Josefsson <simon@josefsson.org>  Tue, 07 Oct 2025 18:13:55 +0200

golang-go.crypto (1:0.42.0-3) unstable; urgency=medium

  * Team upload.
  * Skip TestCSHAKELargeS on s390x.
  * Breaks golang-github-skeema-knownhosts-dev<<1.3.1.

 -- Simon Josefsson <simon@josefsson.org>  Sun, 05 Oct 2025 18:19:10 +0200

golang-go.crypto (1:0.42.0-2) unstable; urgency=medium

  * Team upload.
  * Timeout 10m->25m dh_auto_test for s390x TestCSHAKELargeS.
  * Turn openssh-server into a !nocheck B-D.

 -- Simon Josefsson <simon@josefsson.org>  Sun, 05 Oct 2025 08:11:03 +0200

golang-go.crypto (1:0.42.0-1) unstable; urgency=medium

  * Team upload.
  * Upload to unstable.
  * Use gbp debian-branch debian/latest.

 -- Simon Josefsson <simon@josefsson.org>  Tue, 30 Sep 2025 09:54:41 +0200

golang-go.crypto (1:0.42.0-1~exp1) experimental; urgency=medium

  * Team upload.
  * New upstream version 0.42.0
  * Drop Rules-Requires-Root: no.
  * Use watch v5 file.

 -- Simon Josefsson <simon@josefsson.org>  Sun, 28 Sep 2025 22:33:56 +0200

golang-go.crypto (1:0.41.0-1~exp1) experimental; urgency=medium

  * Team upload.
  * Use gbp debian-branch debian/experimental.
  * New upstream version 0.41.0
  * Refresh patches.
  * Ship bundle.der too.
  * Disable failing pebble self-tests.
  * Bump debian/* copyright years.
  * Standards-Version: 4.7.2.
  * Fix DEP3 Last-Update syntax error.

 -- Simon Josefsson <simon@josefsson.org>  Mon, 01 Sep 2025 11:30:12 +0200

golang-go.crypto (1:0.36.0-1~exp1) experimental; urgency=medium

  * Team upload.
  * New upstream version 0.36.0

 -- Santiago Ruano Rincón <santiagorr@riseup.net>  Tue, 18 Mar 2025 06:59:19 -0300

golang-go.crypto (1:0.33.0-1~exp1) experimental; urgency=medium

  * Team upload
  * New upstream version 0.33.0
    * Fix CVE-2024-45337: Applications and libraries which misuse the
      ServerConfig.PublicKeyCallback callback may be susceptible to an
      authorization bypass. (Closes: #1089754)
  * Remove 0003-ssh-don-t-use-dsa-keys-in-integration-tests.patch, no longer
    needed

 -- Santiago Ruano Rincón <santiagorr@riseup.net>  Fri, 14 Feb 2025 09:43:14 -0300

golang-go.crypto (1:0.25.0-1) unstable; urgency=medium

  * New upstream version 0.25.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Sun, 01 Sep 2024 08:39:31 -0600

golang-go.crypto (1:0.24.0-2) unstable; urgency=medium

  * Bump to golang-golang-x-text-dev (>= 0.16.0) as per go.mod
  * Apply patch "ssh: don't use dsa keys in integration tests"
    by Nicola Murino in commit bb80217080b0e04c6e73e5dcd9f3a9bb11fe23f6
    dated 2024-07-21: "DSA has been disabled by default since OpenSSH 9.8,
    so tests fail with newer versions of OpenSSH".  Fixes FTBFS:
    "client_test.go:149: insert(*dsa.PrivateKey): agent: failure".
    Thanks to Santiago Vila for bringing this to my attention!
    (Closes: #1078281)

 -- Anthony Fok <foka@debian.org>  Sat, 10 Aug 2024 02:57:23 -0600

golang-go.crypto (1:0.24.0-1) unstable; urgency=medium

  * New upstream version 0.24.0
  * Bump versioned dependencies as per go.mod, except for
    golang-golang-x-text-dev (>= 0.16.0) which still needs to be packaged

 -- Anthony Fok <foka@debian.org>  Wed, 31 Jul 2024 11:19:14 -0600

golang-go.crypto (1:0.23.0-1) unstable; urgency=medium

  * New upstream version 0.23.0
  * Bump versioned dependencies as per go.mod
  * Update local copy of golang.org/x/net/idna from v0.10.0 to v0.21.0

 -- Anthony Fok <foka@debian.org>  Mon, 20 May 2024 18:46:25 -0600

golang-go.crypto (1:0.22.0-1) unstable; urgency=medium

  * New upstream version 0.22.0
  * Bump versioned dependencies as per go.mod
  * Bump Standards-Version to 4.7.0 (no change)

 -- Anthony Fok <foka@debian.org>  Fri, 26 Apr 2024 03:11:29 -0600

golang-go.crypto (1:0.21.0-1) unstable; urgency=medium

  * New upstream version 0.21.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Sun, 24 Mar 2024 17:54:46 -0600

golang-go.crypto (1:0.19.0-1) unstable; urgency=medium

  * New upstream version 0.19.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Fri, 23 Feb 2024 19:29:57 -0700

golang-go.crypto (1:0.18.0-1) unstable; urgency=medium

  * New upstream version 0.18.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Mon, 29 Jan 2024 14:46:20 -0700

golang-go.crypto (1:0.17.0-1) unstable; urgency=medium

  * New upstream version 0.17.0
    * CVE-2023-48795
      ssh: implement strict KEX protocol changes
      Implement the "strict KEX" protocol changes, as described in section
      1.9 of the OpenSSH PROTOCOL file (as of OpenSSH version 9.6/9.6p1).
      (Closes: #1059003)

 -- Anthony Fok <foka@debian.org>  Sun, 07 Jan 2024 08:25:22 -0700

golang-go.crypto (1:0.16.0-1) unstable; urgency=medium

  * New upstream version 0.16.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Thu, 07 Dec 2023 01:53:53 -0700

golang-go.crypto (1:0.14.0-1) unstable; urgency=medium

  * New upstream version 0.14.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Wed, 01 Nov 2023 02:00:40 -0600

golang-go.crypto (1:0.13.0-1) unstable; urgency=medium

  * New upstream version 0.13.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Thu, 12 Oct 2023 01:27:41 -0600

golang-go.crypto (1:0.12.0-1) unstable; urgency=medium

  * New upstream version 0.12.0
  * Bump versioned dependencies as per go.mod
  * Refresh Debian patches

 -- Anthony Fok <foka@debian.org>  Mon, 09 Oct 2023 18:04:57 -0600

golang-go.crypto (1:0.10.0-1) unstable; urgency=medium

  * New upstream version 0.10.0
  * Add debian/update-vendored-golang-x-net-idna.sh script
    to facilitate the download of golang.org/x/net/idna for vendoring
    to avoid circular dependency with golang-golang-x-net-dev;
    see debian/README.source for details.
  * debian/rules: Add execute_after_dh_auto_configure target
    to copy golang.org/x/net into vendor directory during build time
  * Commit our local copy of golang.org/x/net/idna v0.10.0
    downloaded with debian/update-vendored-golang-x-net-idna.sh
  * Bump versioned dependencies as per go.mod,
    removing dependency on golang-golang-x-net-dev, but
    adding dependency on golang-golang-x-text-dev
    which is needed by our vendored copy of golang.org/x/net/idna.

 -- Anthony Fok <foka@debian.org>  Thu, 21 Sep 2023 04:55:01 -0600

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog golang-golang-x-crypto-dev`.
