Re: SSSD update LTS

[Mike Gabriel]

Hi Rouca,

On  Di 10 Nov 2026 22:23:48 CET, Bastien Roucaries wrote:

Le jeudi 5 novembre 2026, 15:20:05 heure normale d’Europe centrale Bastien Roucaries a écrit :

Le jeudi 5 novembre 2026, 13:53:34 heure normale d’Europe centrale Mike Gabriel a écrit :

> Hi Rouca,
>
> On  Do 05 Nov 2026 12:12:27 CET, Bastien Roucaries wrote:
>
> > Le mercredi 4 novembre 2026, 22:14:20 heure normale d’Europe
> > centrale Mike Gabriel a écrit :
> >> Hi Rouca,
> >>
> >> On  Mi 04 Nov 2026 21:16:50 CET, Bastien Roucaries wrote:
> >>
> >> > Le mercredi 4 novembre 2026, 00:04:10 heure normale d’Europe
> >> > centrale Mike Gabriel a écrit :
> >> >> Hi Rouca,
> >> >>
> >> >> On  Di 03 Nov 2026 19:02:37 CET, Bastien Roucaries wrote:
> >> >>
> >> >> > Hi mike,
> >> >> >
> >> >> > I plan to do a few LTS update of sssd I want to coordinate with
> >> >> you before.
> >> >> >
> >> >> > What is the release plan particularly for trixie
> >> >> >
> >> >> > rouca
> >> >>
> >> >> There is a trixie-pu (no-dsa) of sssd pending acceptance in the
> >> >> trixie-proposed-new queue.
> >> >>
> >> >> See #1147137.
> >> >>
> >> >> For CVEs newer than CVE-2026-80048, it is unclear to me if patches
> >> >> already exist that fix those issues. Triaging and updating
> >> >> security-tracker would help here. (Maybe you can spend some time on
> >> >> this?)
> >> >>

> >> >> to upload them to unstable asap.
> >> >
> >> > There are patches
> >> >
> >> > I have updated tracker and opened two bug upstream about status of
> >> > two remaining CVE:
> >> > https://github.com/SSSD/sssd/issues/9605
> >> > https://github.com/SSSD/sssd/issues/9606
> >
> > Upstream give us the needed commit
>
> Ok. Will start working on an update. (Are all URLs in security-tracker
> meanwhile?)
Everything put on tracker

> >> >> If more patches are available to fix yet unresolved CVEs, I'd be happy

sssd migrated to testing can you upload a new sid version ?

rouca

Mike
--

mike gabriel aka sunweaver (Debian Developer)
mobile: +49 (1520) 1976 148
landline: +49 (4351) 486 14 27

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunwea...@debian.org, http://sunweavers.net

I have nearly added all CVE patches to the unstable version. See the packaging Git. Most patches I pushed this morning. However, I'll have 3-4 (iirc) patches still to look at. Will hopefully get around to an upload tomorrow.

pgpWw0sPNxpeB.pgp
Description: Digitale PGP-Signatur