[Pkg-samba-maint] Debian->Ubuntu flow for samba packages?

[Steve Langasek]

On Tue, Jan 06, 2009 at 07:15:37AM +0100, Christian Perrier wrote:
> I would really love to be able to explain Ubuntu users what they might
> expect but I have actually no idea about the flow of packages.

> So let's take the opportunity of our team composition (hint hint) to
> make things clearer.

> If I'm correct, Ubuntu 0810 (I can't cope with the funky names, sorry..."Intrepid"?)
> had 3.2.3 or something and the "in preparation" 0904 ("jaunty"?) has
> "what has Debian in unstable".

> Am I correct?

> If so, how are these updates handled? Does the Ubuntu security team
> backport the fixes (the same way ours is doing for stable)?

> What about 0804 which is, IIRC an LTS version?

http://packages.ubuntu.com/search?keywords=samba

8.04 (== hardy) has 3.0.28a, so is not affected by this bug.
8.10 (== intrepid) has 3.2.3, so is affected.  The USN for this issue has
already been published: http://www.ubuntu.com/usn

jaunty will eventually be Ubuntu 9.04, and contains version
2:3.2.5-3ubuntu1.  So getting the security fix into jaunty will require an
additional merge of the changes in unstable.  (I'm not in a particular hurry
here - Ubuntu devel releases don't have security support in general, and
this vulnerability only affects systems that have the non-default 'registry
shares' option enabled, so the only real deadline for this is "April".)

> I think it would be great to be able to tell things about Ubuntu in
> our semi-official annoucements in Samba mailing lists. It would make
> it clearer for folks not really aware of the Debian-Ubuntu workflow
> and relations that things are quite strongly tight together...

Well, I'm not sure you're reaching the audience that this point needs to be
made to when posting to the samba lists, but I don't have any objections. :)

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org