docker-registry (2.8.3+ds1-3) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/go-team/packages/golang-github-docker-distribution.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Repo size: 4022272
Browser: https://salsa.debian.org/go-team/packages/golang-github-docker-distribution
Last scan: 2026-10-03 16:08:05+00
Next scan: 2026-10-12 10:47:00+00
CI pipeline status: success

Debian changelog in Git:

docker-registry (2.8.3+ds1-3) unstable; urgency=medium

  * Team upload.

  [ Reinhard Tartler ]
  * Backport CVE fixes from upstream 3.1.1
    - CVE-2026-33540: bind proxy-mode bearer realms to the upstream trust
      boundary so credentials are never sent to an attacker-controlled
      realm. Closes: #1134567
    - CVE-2026-35172: fully revoke repository-scoped blob descriptors in
      the Redis cache so deleted blobs cannot be resurrected from stale
      cache entries. Closes: #1134567
    - Add golang-golang-x-net-dev build dependency for
      golang.org/x/net/publicsuffix

  [ Luca Boccassi ]
  * Install and use sysusers.d/tmpfiles.d configuration files in place
    of the manual docker-registry.postinst maintainer script.

 -- Reinhard Tartler <siretart@tauware.de>  Sun, 02 Aug 2026 12:23:44 +0200

This branch is even with tag debian/2.8.3+ds1-3