[Pkg-samba-maint] Samba LTS for Debian Bookworm

[Salvatore Bonaccorso]

Hi Santiago,

On Fri, Feb 09, 2024 at 11:12:59AM -0300, Santiago Ruano Rincón wrote:
> Dear security team,
> 
> We would like to let you know about the Samba (4.17) LTS project. Freexian is
> sponsoring the work of Catalyst (https://www.catalyst.net.nz) to provide
> security support for the Samba version in Debian Bookworm, for up to 5
> years after the initial release. This includes supporting Samba as AD DC, and we
> hope this project will help to keep Samba in Bookworm in a better shape than the
> current situation in Bullseye and older.
> 
> According to the upstream release cycle, 4.17 would reach EOL upstream this
> March, 18 months after 4.17.0 was released. After that, Catalyst will keep an
> LTS specific git tree (*). There will be probably LTS release versions, which I
> guess it would make keeping the support in Bookworm consistent with the current
> method, (AFAUI, packaging Samba minor releases). I guess this is important for
> your work, so I will let you know once this has been set up. Catalyst will also
> use the regular Samba bugzilla to keep track of the security bugs in Samba LTS,
> including while they are embargoed.
> 
> It is also important to note that the Samba LTS is an experiment, in the same
> way than Debian LTS was born. We will do our best to make it a success and
> continue supporting future Samba versions in Debian.
> 
> (*) Of course, Catalyst will be the main actor there, but the whole community is
> invited to contribute.
> 
> Don't hesitate to ask if you have any questions or comments :-)

Thanks a lot for letting us know and for this heads-up!

Regards,
Salvatore