vcswatch reports that
this package seems to have new commits in its VCS but has
not yet updated debian/changelog. You should consider updating
the Debian changelog and uploading this new version into the archive.
Here are the relevant commit logs:
commit c0c3ee3d29cf93ab91d4608818db5cbb0b3d2cfc
Merge: f2c6d3f 68046bd
Author: Marco d'Itri <md@linux.it>
Date: Sun Jan 4 19:20:14 2026 +0100
Update upstream source from tag 'v0.6.3'
Update to upstream version '0.6.3'
with Debian dir 1f60b39a66e97394699d3cc4c2b31e23d747d30a
commit 68046bd6630d5e09a198336e7d74c20342c8b994
Author: Ben Cartwright-Cox <ben@benjojo.co.uk>
Date: Tue Nov 25 16:31:26 2025 +0000
Another readme tweak to bump the needed go version
The new /x/crypto lib version needs 1.24.x
commit ac084e372c56ae78a535c45ebaf1cb3c839c2a56
Author: Ben Cartwright-Cox <ben@benjojo.co.uk>
Date: Tue Nov 25 16:28:54 2025 +0000
Bump dependencies to patch SSH DoS issue
Vulnerability #1: GO-2025-4134
Unbounded memory consumption in golang.org/x/crypto/ssh
More info: https://pkg.go.dev/vuln/GO-2025-4134