Re: Is this the right place to discuss no-dsa choices?

Path	csiph.com!news.uzoreto.com!eternal-september.org!reader02.eternal-september.org!aioe.org!bofh.it!news.nic.it!robomod
From	Andrew Bartlett <abartlet@samba.org>
Newsgroups	linux.debian.security
Subject	Re: Is this the right place to discuss no-dsa choices?
Date	Wed, 12 May 2021 10:00:01 +0200
Message-ID	<CdRWF-2Ws-1@gated-at.bofh.it> (permalink)
References	<CdJPr-6wI-1@gated-at.bofh.it> <CdPrQ-1Ds-5@gated-at.bofh.it>
X-Original-To	Paul Wise <pabs@debian.org>
X-Mailbox-Line	From debian-security-request@lists.debian.org Wed May 12 07:51:10 2021
Old-Return-Path	<abartlet@samba.org>
X-Amavis-Spam-Status	No, score=-6.563 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, SARE_MSGID_LONG40=0.637] autolearn=ham autolearn_force=no
X-Policyd-Weight	using cached result; rate: -4.6
Content-Type	text/plain; charset="UTF-8"
User-Agent	Evolution 3.36.4-0ubuntu1
MIME-Version	1.0
Content-Transfer-Encoding	7bit
X-Mailing-List	<debian-security@lists.debian.org> archive/latest/29076
List-ID	<debian-security.lists.debian.org>
List-URL	<https://lists.debian.org/debian-security/>
List-Archive	https://lists.debian.org/msgid-search/fc4df1f92398c8d0526daef48ef9d4f7bde522f7.camel@samba.org
Approved	robomod@news.nic.it
Lines	30
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	debian-security@lists.debian.org
X-Original-Date	Wed, 12 May 2021 19:34:56 +1200
X-Original-Message-ID	<fc4df1f92398c8d0526daef48ef9d4f7bde522f7.camel@samba.org>
X-Original-References	<3f7cc799edf69f8f58efecea7211634aa73e6aca.camel@samba.org> <CAKTje6GHSQpmp1=LEZqtnGcZEssWO=8D1Ko+wqSt8UCQGocWnw@mail.gmail.com>
Xref	csiph.com linux.debian.security:5942

Show key headers only | View raw

On Wed, 2021-05-12 at 05:10 +0000, Paul Wise wrote:
> On Tue, May 11, 2021 at 11:12 PM Andrew Bartlett wrote:
> 
> > I'm keen to discuss the thought process behind a number of the no-
> > dsa
> > flags on Samba security releases.  Does this list reach those
> > involved
> > in that, or is this more a general 'interest in security' list?
> 
> It tends to be more of a general security list. Probably contacting
> the security team directly on security@debian.org or
> team@security.debian.org is more appropriate, or if you want to
> discuss the issues in public, the debian-security-tracker list.
> 
> https://security-tracker.debian.org/tracker/data/report
> https://lists.debian.org/debian-security-tracker/

Thanks, I've mailed the security team, CCing the Debian Samba Team.

Hopefully they can help me out.

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions

Thread

Is this the right place to discuss no-dsa choices? Andrew Bartlett <abartlet@samba.org> - 2021-05-12 01:20 +0200
  Re: Is this the right place to discuss no-dsa choices? Paul Wise <pabs@debian.org> - 2021-05-12 07:20 +0200
    Re: Is this the right place to discuss no-dsa choices? Andrew Bartlett <abartlet@samba.org> - 2021-05-12 10:00 +0200
      Re: Is this the right place to discuss no-dsa choices? Sylvain Beucler <beuc@beuc.net> - 2021-05-17 22:20 +0200
        no-dsa for Samba CVEs in Debian. Andrew Bartlett <abartlet@samba.org> - 2021-05-18 00:00 +0200
          Re: no-dsa for Samba CVEs in Debian. Salvatore Bonaccorso <carnil@debian.org> - 2021-05-18 07:20 +0200
            Re: no-dsa for Samba CVEs in Debian. Sylvain Beucler <beuc@beuc.net> - 2021-05-19 17:00 +0200

csiph-web