Re: Situation of samba packages (security update)
On Wed, 2010-09-15 at 06:42 +0200, Christian PERRIER wrote:
> In the meantime, yesterday (Sept 14th) upstream released a security
> update (3.3.14, 3.4.9, 3.5.5) for a buffer overrun vulnerability. This
> update happened without prior private warning, so we have to react as
> quickly as possible, without preparation.
[...]
> My concern is testing (and backports.org). As the choice between 3.4
> and 3.5 hasn't been made yet, we're not 100% sure that squeeze will
> have 3.5 and, anyway, during the few weeks of 3.5 "maturation" in
> unstable....testing and backports users are left without update.
>
> So, having 3.4.9 in testing sems needed. Should I upload it through
> t-p-u? If that's done, I will also upload a fixed 3.4.9 version to backports
Assuming that the diff between the 3.4.8 packages currently in testing
and the tpu package would simply be upstream's patch from their security
page, please go ahead.
Regards,
Adam
Reply to: