[Pkg-sssd-devel] Bug#1143947: Bug#1143600: intention to NMU

[Marc Haber]

Hi Luke,

please hold back the NMU for the time being.  for the time being. There 
is a new team forming to maintain sssd in the future. A Salsa MR would 
be appreciated though, if forking the repository works for you.

Did I just see you in the "new DD" list? If so, welcome to the project. 
That being said, I'd not want to start my DD career with an NMU of a 
seucrity relevant package.

Please consider subscribing to the sssd package in the tracker so that 
you get all relevant communication.

Greetings
Marc

On Fri, Sep 04, 2026 at 02:38:48PM +0900, Luke Yasuda wrote:
>From: Luke Yasuda <jing at jing.rocks>
>Subject: Bug#1143600: intention to NMU
>To: 1141769 at bugs.debian.org, 1143600 at bugs.debian.org, 1143947 at bugs.debian.org
>Reply-To: Luke Yasuda <jing at jing.rocks>, 1143600 at bugs.debian.org
>Date: Fri, 04 Sep 2026 14:38:48 +0900
>X-Debian-PR-Package: src:sssd
>List-Id: <sssd.tracker.debian.org>
>X-PTS-Package: sssd
>X-Spam-Score: (---) -3.9
>X-Spam-Report: torres.zugschlus.de  Content analysis details:   (-3.9
> points, 5.0 required)   pts  rule name              description  ----
> ---------------------- ------------------------------------------- -2.3
> RCVD_IN_DNSWL_MED      RBL: Sender listed at https://www.dnswl.org/,
>                             medium trust
>                             [2001:648:2ffc:deb:216:61ff:fe9d:958d listed
> in]                             [list.dnswl.org] -0.0 SPF_HELO_PASS
>          SPF: HELO matches SPF record -0.0 SPF_PASS               SPF:
> sender matches SPF record  0.1 DKIM_SIGNED            Message has a DKIM or
> DK signature, not necessarily valid  0.5 DKIM_INVALID           DKIM or DK
> signature exists, but is not valid -1.9 BAYES_00               BODY: Bayes
> spam probability is 0 to 1%                             [score: 0.0000]
>  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
>                             domains are different -0.5 MAILING_LIST_MULTI
>     Multiple indicators imply a widely-seen list
>                             manager
>
>Hi,
>
>I would like to do an NMU to fix this/these bug(s). Patches exist in 
>upstream github repo. I'll pick those patches.
>
>CVE-2026-68744: https://github.com/SSSD/sssd/pull/9217
>CVE-2026-68743: https://github.com/SSSD/sssd/pull/9215
>CVE-2026-68742: https://github.com/SSSD/sssd/pull/9216
>CVE-2026-14476: https://github.com/SSSD/sssd/pull/8907
>CVE-2026-14474: https://github.com/SSSD/sssd/pull/8897
>
>Cheers,
>-- 
>Luke Yasuda
>GPG Fingerprint: 4E09 8D19 00AA 3F72 1899 2614 09B3 316E 13A1 1EFC



-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421