[Git][security-tracker-team/security-tracker][master] Reserve DLA-2463-1 for samba

[Roberto C. Sánchez]

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4324b24b by Roberto C. Sánchez at 2020-11-22T21:51:02-05:00
Reserve DLA-2463-1 for samba

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[22 Nov 2020] DLA-2463-1 samba - security update
+	{CVE-2020-1472 CVE-2020-10704 CVE-2020-10730 CVE-2020-10745 CVE-2020-10760 CVE-2020-14303 CVE-2020-14318 CVE-2020-14323 CVE-2020-14383}
+	[stretch] - samba 2:4.5.16+dfsg-1+deb9u3
 [23 Nov 2020] DLA-2462-1 cimg - security update
 	{CVE-2020-25693}
 	[stretch] - cimg 1.7.9+dfsg-1+deb9u2


=====================================
data/dla-needed.txt
=====================================
@@ -154,15 +154,6 @@ ruby-oauth
 --
 salt (Abhijith PA)
 --
-samba (Roberto C. Sánchez)
-  NOTE: 20200703: Check with security team so that there's no clash for Stretch update. (utkarsh)
-  NOTE: 20200801: Stretch update already released, so no conflict. (roberto)
-  NOTE: 20200801: Patches for CVE-2020-14303, CVE-2020-10760, CVE-2020-10745, and CVE-2020-10740, are ready. (roberto)
-  NOTE: 20200801: Best to wait for additional CVEs before uploading; check with Roberto for patches. (roberto)
-  NOTE: 20200830: Will remove this entry and mark all current CVEs as postponed. But first I need to know were the patches are (ola).
-  NOTE: 20200903: As discussed internally, I will look into Samba AD CVEs and revisit the risk assessment, plus fix the more severe issues (sunweaver)
-  NOTE: 20201116: Still working to integrate zerologon fix. (roberto)
---
 shiro
   NOTE: 20200920: WIP
   NOTE: 20200928: Still awaiting reponse to request for assistance sent to upstream dev list. (roberto)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4324b24be6467fac302d1dfd3588bc34c136b991

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4324b24be6467fac302d1dfd3588bc34c136b991
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201123/ad7d862f/attachment-0001.html>