[Pkg-samba-maint] Bug#1001068: samba: Missing upstream commit 0a546be0 on bullseye, bookworm and sid (part of CVE-2020-25717)

[Salvatore Bonaccorso]

Hi Jörg,

On Fri, Dec 03, 2021 at 03:44:02PM +0100, Jörg Behrmann wrote:
> Package: samba
> Version: 2:4.13.13+dfsg-1~deb11u2
> Severity: important
> X-Debbugs-Cc: team at security.debian.org
> 
> The upstream samba commit 0a546be0 is included in the buster security release
> 2:4.9.5+dfsg-5+deb10u2 via the patch file bug-14901-v4-9.patch, but is missing
> in the bullseye security release 2:4.13.13+dfsg-1~deb11u2.
> 
> Pleae apply that patch in bullseye as well, so that the idmap_nss fallback via
> SID mapping works.

In case you have the possiblity, can you test the packages from
https://people.debian.org/~carnil/tmp/samba/2022-01-31/bullseye/ ?

Regards,
Salvatore