tag 868209 pending thanks Hello,
Bug #868209 reported by you has been fixed in the Git repository. You can see the changelog below, and you can check the diff of the fix at: https://anonscm.debian.org/cgit/pkg-samba/samba.git/commit/?id=feb2524 --- commit feb2524d7fcc307b78d5bed5fc0ef1873a3e7e24 Author: Mathieu Parent <math.par...@gmail.com> Date: Wed Jul 12 23:22:29 2017 +0200 Release 2:4.5.8+dfsg-2+deb9u1 diff --git a/debian/changelog b/debian/changelog index 750f427..53cf863 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,11 @@ +samba (2:4.5.8+dfsg-2+deb9u1) stretch-security; urgency=high + + * This is a security release in order to address the following defect: + - CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation + (Closes: #868209) + + -- Mathieu Parent <sath...@debian.org> Thu, 13 Jul 2017 14:43:44 +0200 + samba (2:4.5.8+dfsg-2) unstable; urgency=high * CVE-2017-7494: rpc_server3: Refuse to open pipe names with / inside