docker.io-app (26.1.3-0ubuntu1~22.04.1+esm1) jammy-security; urgency=medium

  * SECURITY UPDATE: authz plugin bypass causes privilege escalation
    - debian/patches/CVE-2024-41110-1.patch: Authz plugin security fixes
      for 0-length content and path validation
    - debian/patches/CVE-2024-41110-2.patch: If url includes scheme,
      urlPath will drop hostname, which would not match the auth check
    - CVE-2024-41110 

 -- Vyom Yadav <vyom.yadav@canonical.com>  Mon, 17 Feb 2025 11:37:24 +0530

docker.io-app (26.1.3-0ubuntu1~22.04.1) jammy; urgency=medium

  * Backport from oracular to jammy. (LP: #2040461)

 -- Athos Ribeiro <athos.ribeiro@canonical.com>  Mon, 14 Oct 2024 18:24:40 -0300

docker.io-app (26.1.3-0ubuntu1) oracular; urgency=medium

  * New upstream release.
    - Allow runc to kill containers when confined to the runc profile in
      AppArmor version 4.0.0 and later.
  * d/helpers/build-manpages.sh: build manpages with Go 1.21.
  * d/manpages: update them all.
  * d/docker.io.docs: remove NOTICE file of a dependency removed from cli.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Tue, 04 Jun 2024 18:01:29 -0300

docker.io-app (24.0.7-0ubuntu4) noble; urgency=medium

  * Build with Go 1.22.
    - d/control: b-d on golang-1.22-go instead of golang-1.21-go
    - d/rules: add Go 1.22 to $PATH

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Wed, 17 Apr 2024 17:08:25 -0300

docker.io-app (24.0.7-0ubuntu3) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- William Grant <wgrant@ubuntu.com>  Mon, 01 Apr 2024 16:45:29 +1100

docker.io-app (24.0.7-0ubuntu2) noble; urgency=medium

  * Build with Go 1.21 (LP: #2056154)
    - d/control: b-d on golang-1.21-go instead of golang-1.20-go
    - d/rules: add Go 1.21 to $PATH

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Tue, 12 Mar 2024 11:39:49 -0300

docker.io-app (24.0.7-0ubuntu1) noble; urgency=medium

  * d/get-orig-source.sh: use .gz format instead of .xz
  * New upstream version 24.0.7
  * d/manpages/*: update manpages for version 24.0.7

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Mon, 15 Jan 2024 16:40:29 -0300

docker.io-app (24.0.5-0ubuntu1) mantic; urgency=medium

  * Update the way MUT are pre-processed and imported.
    - d/get-orig-source.sh: create a script to be called by uscan when
      importing a new version. This script is going to fetch all the needed
      components and combine all the tarballs into a single one.
    - d/helpers/{real,tini}-upstream-version.sh: create helper scripts to
      support the d/get-orig-source.sh. They process the upstream version of
      differente components.
    - d/watch: update to track just github.com/moby/moby which is the main
      component of this package, the others are now tracked and fetched by
      d/get-orig-source.sh.
  * New upstream version 24.0.5 (LP: #2030500).
  * The libnetwork component is now shipped inside the engine component.
    - d/rules: update to build proxy from the new path.
    - d/docker.io.docs: do not install NOTICE from the removed libnetwork
      component.
    - d/copyright: remove all entries for libnetwork component.
  * Build CLI manpages before build time to avoid downloading modules from the
    Internet.
    - d/docker.io.manpages: install manpages from debian/manpages.
    - d/helpers/build-manpages.sh: create a wrapper for the upstream script
      to generate manpages and place them in the expected directory.
    - d/rules: do not try to build manpage during build time, instead, check
      if the manpages version matches with the upstream one.
  * Create debian/manpages with debian/helpers/build-manpages.sh.
  * Do not override dh_strip, it works fine with Go binaries nowadays.
    - d/docker.io.lintian-overrides: remove unneeded overrides.
    - d/rules: do not override dh_strip.
  * d/control: use arch:any instead of hard-coded arches.
    The list already contains all the supported architectures in all
    supported releases (non-ESM).
  * d/control: suggests docker-buildx and docker-compose-v2.
  * d/README.source: document how to import a new upstream release.
  * Build with Go 1.20. Let's rely on a fixed version for all supported
    releases.
    - d/control: b-d on golang-1.20-go instead of golang-go.
    - d/rules: add Go 1.20 to $PATH.
  * d/docker.io.lintian-overrides: ignore statically-linked-binary.
    This is not a problem for Go binaries.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Wed, 16 Aug 2023 18:32:36 -0300

docker.io-app (20.10.25-0ubuntu1) mantic; urgency=medium

  * Initial release. See LP #2022390.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Wed, 17 May 2023 16:17:52 -0300
