golang-yaml.v2 (0.0+git20160301.0.a83829b-1ubuntu0.1~esm1) xenial-security; urgency=medium

  * SECURITY UPDATE: DOS through excessive alias.
    - debian/patches/CVE-2021-4235.patch: Add logic to catch cases of
      alias abuse in decode.go.
    - CVE-2021-4235
  * SECURITY_UPDATE: DOS through nested or expansion in large documents.
    - debian/patches/CVE-2022-3064.patch: Improve heuristics preventing
      CPU/memory abuse in decode.go and scannerc.go.
    - CVE-2022-3064

 -- David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>  Fri, 11 Aug 2023 09:58:47 +0200

golang-yaml.v2 (0.0+git20160301.0.a83829b-1) unstable; urgency=medium

  * Update to latest upstream commit to pull in fixes for golang-1.6
  * Upgrade to latest standards version in d/control

 -- Tim Potter <tpot@hpe.com>  Tue, 05 Apr 2016 18:59:30 -0400

golang-yaml.v2 (0.0+git20150627.7ad95dd-1) unstable; urgency=medium

  * Update to latest upstream commit, and upload to Debian.

 -- Martín Ferrari <tincho@debian.org>  Sat, 27 Jun 2015 07:03:38 +0000

golang-yaml.v2 (0.0~git20150225-1) unstable; urgency=low

  * Initial package. (Closes: #779237)

 -- Sergio Schvezov <sergio.schvezov@canonical.com>  Wed, 25 Feb 2015 09:31:29 -0300
