golang-github-go-git-go-git (5.4.2-3ubuntu0.1~esm1) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of service during pull operations
    - debian/patches/CVE-2023-49568.patch: Stop commit iteration at earliest
      shallow boundary during pull operations in remote.go and worktree.go
    - CVE-2023-49568
  * SECURITY UPDATE: Path traversal when crafted reference names allow
    filesystem writes outside repository paths
    - debian/patches/CVE-2023-49569.patch: Validate Git reference names before
      creating branches, tags, and remotes in plumbing/reference.go
    - CVE-2023-49569
  * SECURITY UPDATE: Argument injection when git-upload-pack flags are modified
    - debian/patches/CVE-2025-21613.patch: Convert file transport endpoint
      paths to absolute paths in plumbing/transport/common.go
    - CVE-2025-21613
  * SECURITY UPDATE: Denial of service during sideband stream processing
    - debian/patches/CVE-2025-21614.patch: Return io.EOF on empty sideband
      packets to terminate demux scanner correctly in
      plumbing/protocol/packp/sideband/demux.go
    - CVE-2025-21614
  * SECURITY UPDATE: Data integrity validation failure when corrupted packfiles
    bypass checksum verification
    - debian/patches/CVE-2026-25934.patch: Detect malformed packfiles during
      parsing in plumbing/format/packfile/parser.go and scanner.go
    - CVE-2026-25934
  * Fix FTBFS due to failing test (LP: #2143856)
    - debian/patches/FTBFS-skip-failing-test-tzdata.patch: Skip test
      TestDepthSinceNonUTC in plumbing/protocol/packp/ulreq_encode_test.go

 -- Shafayat Hossain Majumder <shafayat.majumder@canonical.com>  Wed, 11 Mar 2026 09:36:13 -0400

golang-github-go-git-go-git (5.4.2-3) unstable; urgency=medium

  * Source only upload for migration to testing

 -- Pirate Praveen <praveen@debian.org>  Mon, 22 Nov 2021 10:07:32 +0530

golang-github-go-git-go-git (5.4.2-2) unstable; urgency=medium

  * Rebuild for unique version in DAK (-1 was REJECTED)

 -- Pirate Praveen <praveen@debian.org>  Fri, 19 Nov 2021 18:22:58 +0530

golang-github-go-git-go-git (5.4.2-1) unstable; urgency=medium

  * Initial release (Closes: #998884)

 -- Pirate Praveen <praveen@debian.org>  Tue, 09 Nov 2021 17:33:39 +0530
