[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Synchronising with Ubuntu

On Mon, Aug 03, 2009 at 03:55:16PM +0000, Anthony Towns wrote:
> 	etch:  2006/12 - 2007/04 (decent hit for feisty's import freeze)
> 	lenny: 2008/07 - 2009/02 (decent hit for jaunty's import freeze)
> dapper and hardy are the two Ubuntu LTS releases so far, dapper reached
> its desktop end-of-life a couple of weeks ago. feisty hit its end-of-life
> in October last year. I'm just extrapolating from karmic's release
> schedule; I haven't checked the schedules weren't different historically.
> Based on that, comparing universe packages in etch-vs-feisty and
> lenny-vs-jaunty for version differences, and any differences in security
> updates could be interesting, actually.

Turns out it kind-of is, too.

First, basics:

    etch: froze in December 2006, released in April 2007; still supported
    feisty: DebianImportFreeze in Dec 2006, UpstreamVersionFreeze in Feb 2007,
        released in April 2007; support ended October 2008

Comparison between etch/main and feisty/main+universe by source:

    6874 exact same source
     132 only in Debian
    2273 only in Ubuntu

     600 newer upstream version in Debian
    1538 newer upstream version in Ubuntu

    1079 Ubuntu has Vebian bersion with ubuntuXX patch

As at today (2009/08/11) etch/feisty security support compare as follows:

      63 packages with security updates in both Debian and Ubuntu (11
         same version, 8 where Debian has new upstram, 28 where Ubuntu has
         new upstream, 16 where Ubuntu applied patches to Debian version)

       5 updates in Debian to Debian only packages
       7 updates in Ubuntu to Ubuntu only packages

      31 updates in Debian to packages with the exact same source in Ubuntu
       6 updates in Ubuntu to packages with the exact same source in Debian (!)

      42 packages updated in Debian but not Ubuntu (6 where Debian has
         newer upstream, 30 where Ubuntu has newer upstream, and 6 with
         ubuntuXX patches)

      15 packages updated in Ubuntu but not Debian (4 where Debian has
         newer upstream, 6 where Ubuntu has newer upstream, and 5 with
         ubuntuXX patches)

Of the 31 updates Ubuntu's missing, only one is from feisty/main,
and that lcms 1.15-1.1+etch3, which was DSA-1684-1 (etch1), DSA-1745-1
(etch2) and DSA-1745-2 (etch3), which were released on Dec 10, 2008,
March 20, 2009 and March 25, 2009; well after feisty's end of life in
October 2008.

The 6 updates it seems like should be a no-brainer for Debian to pull are:

    clamcour 0.2.2-1.2+feisty2 universe/mail
    dansguardian universe/web
    denyhosts 2.6-1ubuntu0.1 universe/net
    dircproxy 1.0.5-5ubuntu0.1 universe/net
    dokuwiki 0.0.20061106-6ubuntu0.1 universe/web
    jasper 1.701.0-2ubuntu0.7.04 libs

The only USN I can find covering these is for jasper, namely USN-501-1.

In any event, seems like there's more room for collaboration there at
first glance.

I've half done the same analysis for lenny/jaunty; but apparently it's time
for pizza.


Reply to: