Accepted docker-registry 2.8.3+ds1-3 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 02 Aug 2026 12:23:44 +0200
Source: docker-registry
Architecture: source
Version: 2.8.3+ds1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <[email protected]>
Changed-By: Reinhard Tartler <[email protected]>
Closes: 1134567
Changes:
 docker-registry (2.8.3+ds1-3) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Reinhard Tartler ]
   * Backport CVE fixes from upstream 3.1.1
     - CVE-2026-33540: bind proxy-mode bearer realms to the upstream trust
       boundary so credentials are never sent to an attacker-controlled
       realm. Closes: #1134567
     - CVE-2026-35172: fully revoke repository-scoped blob descriptors in
       the Redis cache so deleted blobs cannot be resurrected from stale
       cache entries. Closes: #1134567
     - Add golang-golang-x-net-dev build dependency for
       golang.org/x/net/publicsuffix
 .
   [ Luca Boccassi ]
   * Install and use sysusers.d/tmpfiles.d configuration files in place
     of the manual docker-registry.postinst maintainer script.
Checksums-Sha1:
 c8f0a175aebfd2ec780eec6cffa6896adbded20a 3349 docker-registry_2.8.3+ds1-3.dsc
 4135c301246db360e71f53efbffc391b57dca732 13076 docker-registry_2.8.3+ds1-3.debian.tar.xz
 9b0c50db8d097695281468a5d8ab393139e82acc 2813908 docker-registry_2.8.3+ds1-3.git.tar.xz
 d9425ac7b5ee92c8c09344298aeedc071bc592e1 17600 docker-registry_2.8.3+ds1-3_source.buildinfo
Checksums-Sha256:
 a23a7b47497e09ba5730f8d8e45561fad9af304dd47a72645b2338fa734fa35a 3349 docker-registry_2.8.3+ds1-3.dsc
 0b4cfba0763aa683f8a1ed63ad61104e0342486bebb006fc725453d99121fa12 13076 docker-registry_2.8.3+ds1-3.debian.tar.xz
 d3ad6df77c821fd842fd18df3ab09c4bbd690b0ad2994a3c77d0a5d05a16a5c8 2813908 docker-registry_2.8.3+ds1-3.git.tar.xz
 35e00154f8545243d4ac8db7c5419b81351877b49d58d564653435a2deda98e3 17600 docker-registry_2.8.3+ds1-3_source.buildinfo
Files:
 3b303eddbcd1af0bc557d13459052bc5 3349 utils optional docker-registry_2.8.3+ds1-3.dsc
 4911f2dff470e33fa5bd4390acf529cd 13076 utils optional docker-registry_2.8.3+ds1-3.debian.tar.xz
 ddd412d90787e121ba40e8d89e3e7e75 2813908 utils optional docker-registry_2.8.3+ds1-3.git.tar.xz
 1b488b89e01522aeb76bf515d0d147d1 17600 utils optional docker-registry_2.8.3+ds1-3_source.buildinfo
Git-Tag-Info: tag=56df79973aa9346ec3730a3c8e53665bfe9f95c2 fp=30de7d1763ab9452c7e0825049a76977942826cb
Git-Tag-Tagger: Reinhard Tartler <[email protected]>

-----BEGIN PGP SIGNATURE-----
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=7t2j
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCam8rJQAKCRCb9qggYcy5
IRBsAQC5xT4lXuHbc5FP8ovu7laXW3T50VN+ncSg5SRKfqRvRgD/efKfnJOXUEIL
f7Uj+IK7QZMdC9BibOw4JG5L6iDrTQ8=
=p4Yt
-----END PGP SIGNATURE-----