New upstream release

diff --git a/debian/changelog b/debian/changelog
index 97646e994946a26322c1176f97f8a9a9a9eb46d3..13cc1b8e4bb94ab155a178c3e4b64f9e5308ea92 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+ostree (2026.3-1) UNRELEASED; urgency=medium
+
+  * New upstream release
+    - Prevent heap buffer overflow on 32-bit systems
+      (RHEL-189207, no known CVE)
+    - Set memory limits for LZMA decoding to prevent resource exhaustion
+      (RHEL-189208, no known CVE)
+
+ -- Simon McVittie <smcv@debian.org>  Mon, 10 Aug 2026 11:09:00 +0100
+
 ostree (2026.2-1) unstable; urgency=medium
 
   * New upstream release