Control: tags -1 + moreinfo

[CC += team@security]

On Mon, 2016-09-05 at 20:50 +0000, Jelmer Vernooij wrote:
> I'd like to update Samba in jessie to 4.2.14+dfsg. Debdiff is attached.

This didn't make it to debian-release, most likely due to the size of
the debdiff.

> The 4 Samba releases since 4.2.10 (currently in jessie) only fix
> important bugs, in particular a CVE (CVE-2016-2119) and various
> regressions introduced by the security fixes from 4.2.10.

Has the possibility of releasing this via the security archive been
discussed? CVE-2016-2119 isn't marked no-dsa in the Security Tracker
currently and by the sound of it the remaining changes relate to fixes
for issues in the previous security update.

Regards,

Adam

Reply via email to