Hi Luke,
please hold back the NMU for the time being. for the time being. There
is a new team forming to maintain sssd in the future. A Salsa MR would
be appreciated though, if forking the repository works for you.
Did I just see you in the "new DD" list? If so, welcome to the project.
That being said, I'd not want to start my DD career with an NMU of a
seucrity relevant package.
Please consider subscribing to the sssd package in the tracker so that
you get all relevant communication.
Greetings
Marc
On Fri, Sep 04, 2026 at 02:38:48PM +0900, Luke Yasuda wrote:
From: Luke Yasuda <[email protected]>
Subject: Bug#1143600: intention to NMU
To: [email protected], [email protected], [email protected]
Reply-To: Luke Yasuda <[email protected]>, [email protected]
Date: Fri, 04 Sep 2026 14:38:48 +0900
X-Debian-PR-Package: src:sssd
List-Id: <sssd.tracker.debian.org>
X-PTS-Package: sssd
X-Spam-Score: (---) -3.9
X-Spam-Report: torres.zugschlus.de Content analysis details: (-3.9
points, 5.0 required) pts rule name description ----
---------------------- ------------------------------------------- -2.3
RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/,
medium trust
[2001:648:2ffc:deb:216:61ff:fe9d:958d listed
in] [list.dnswl.org] -0.0 SPF_HELO_PASS
SPF: HELO matches SPF record -0.0 SPF_PASS SPF:
sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or
DK signature, not necessarily valid 0.5 DKIM_INVALID DKIM or DK
signature exists, but is not valid -1.9 BAYES_00 BODY: Bayes
spam probability is 0 to 1% [score: 0.0000]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different -0.5 MAILING_LIST_MULTI
Multiple indicators imply a widely-seen list
manager
Hi,
I would like to do an NMU to fix this/these bug(s). Patches exist in
upstream github repo. I'll pick those patches.
CVE-2026-68744: https://github.com/SSSD/sssd/pull/9217
CVE-2026-68743: https://github.com/SSSD/sssd/pull/9215
CVE-2026-68742: https://github.com/SSSD/sssd/pull/9216
CVE-2026-14476: https://github.com/SSSD/sssd/pull/8907
CVE-2026-14474: https://github.com/SSSD/sssd/pull/8897
Cheers,
--
Luke Yasuda
GPG Fingerprint: 4E09 8D19 00AA 3F72 1899 2614 09B3 316E 13A1 1EFC
--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421
