Accepted docker-registry 2.8.2+ds1-1 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted docker-registry 2.8.2+ds1-1 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Sat, 13 May 2023 16:04:37 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: docker-registry_2.8.2+ds1-1_source.changes
- Debian-source: docker-registry
- Debian-suite: unstable
- Debian-version: 2.8.2+ds1-1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=cCGMZJo2/OZnZUVIN7asM4TVR+uNzPR88n9cR97QMw8=; b=BjsjI+2wxqxFfPh/avGDQhfiAu fckW1X8RNjnTmYU9qmYUfCJY/6k9vloOg4kwbYuAgGpzXOXVhqucqd5N22P71N28l78CAOa0ZB1k5 pB6O4PKzlBos+yJOTZkBnBfFd6iWzurkxD3SImOmjpl7D7AfLSr4Xz+8ijwGPRhuhychxB3Y3iWn8 czc46l7Mx1meB4UkAzs+j6xNSqmmqlH/7Oo5xCJm2aDZXLCKLeo0F4r++fPGkZosqvJXPIyhBbi9t jaFJ9y/pk9UNwsj6YmotZI47/3an6kJ8GMbU55ZhTO4ZR5hv+y0saAYmzbJKXKWMBr2OREdDBTtzE Nj1l5gAw==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1pxrjZ-0040Td-Fq@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 13 May 2023 23:21:12 +0800
Source: docker-registry
Architecture: source
Version: 2.8.2+ds1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Shengjing Zhu <zhsj@debian.org>
Closes: 1035956
Changes:
docker-registry (2.8.2+ds1-1) unstable; urgency=medium
.
* Team upload
* New upstream version 2.8.2+ds1
+ CVE-2023-2253: Catalog API endpoint can lead to OOM via malicious user
input (Closes: #1035956)
* Drop patch merged by upstream
+ 0009-Fix-panic-in-inmemory-driver.patch
Checksums-Sha1:
6226a49f7db08e666cd28799dabc918e30cea2c0 2425 docker-registry_2.8.2+ds1-1.dsc
74ee725d53c8a6781637efab261622ed131017c0 368092 docker-registry_2.8.2+ds1.orig.tar.xz
0edc25b20163eda8d53c7f084b7c9a32579bf455 9496 docker-registry_2.8.2+ds1-1.debian.tar.xz
09ecab73e0033bf25ab95b101a3816ed829db480 10107 docker-registry_2.8.2+ds1-1_amd64.buildinfo
Checksums-Sha256:
b4d27a631d62d8fd7212ba8721203332b340d0ef9e3c62878b7ae29a629f81d2 2425 docker-registry_2.8.2+ds1-1.dsc
65137484d75412af7a13104a31eed8ed69e97c616bb60cb9f4ed2a9a7cc1f8fb 368092 docker-registry_2.8.2+ds1.orig.tar.xz
101a4794e4f33f88683c2d8c33accd14653eb928ddb39d33d9de39d944516af0 9496 docker-registry_2.8.2+ds1-1.debian.tar.xz
1ef7bd91d0399819e27eaecbe22e3680f13149d1bf48f21609ff72522bc29c97 10107 docker-registry_2.8.2+ds1-1_amd64.buildinfo
Files:
5f787da0251146ba99995f757763f6dc 2425 utils optional docker-registry_2.8.2+ds1-1.dsc
60407802bc26919a89c402b6dc27dda1 368092 utils optional docker-registry_2.8.2+ds1.orig.tar.xz
73696bbcc034eee9632a2fbf909bc245 9496 utils optional docker-registry_2.8.2+ds1-1.debian.tar.xz
9034e71c627d510f3c5f247168382546 10107 utils optional docker-registry_2.8.2+ds1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQSRhdT1d2eu7mxV1B5/RPol6lUUywUCZF+sOwAKCRB/RPol6lUU
y8OiAQDvXNj07n+RwtBgx0JWKwnLP/6SbrcP6AKBdKiZ1ExT+AEAurSMIbmEJjn9
tBTNLAHvG7GQHooCPUQPRpCQaJOxqwI=
=rn7b
-----END PGP SIGNATURE-----