Comment 10 for bug 276020

Re changes and binary files>

We parse the changes file so we can generate the following types of entries in our template USN publication script (usn.py is part of usn-tool):
usn.py $DB $USN --release intrepid --package squid --source-version 2.7.STABLE3-1ubuntu2.1
usn.py $DB $USN --release intrepid --package squid --binary-version 2.7.STABLE3-1ubuntu2.1

usn.py $DB $USN --release intrepid --arch source --url http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.7.STABLE3-1ubuntu2.1.dsc --url-size 1252 --url-md5 6953f88d6f4825daabd9e77bd0fa1a88
usn.py $DB $USN --release intrepid --arch source --url http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.7.STABLE3.orig.tar.gz --url-size 1782040 --url-md5 a4d7608696e2b617aa5853c7d23e25b0
usn.py $DB $USN --release intrepid --arch source --url http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid_2.7.STABLE3-1ubuntu2.1.diff.gz --url-size 303042 --url-md5 9132293f589a71ae3f771e1ae6de30f1

usn.py $DB $USN --release intrepid --arch all --url http://security.ubuntu.com/ubuntu/pool/main/s/squid/squid-common_2.7.STABLE3-1ubuntu2.1_all.deb --url-size 495876 --url-md5 b6d1e76b140c792297c14382a06ed3e3
usn.py $DB $USN --release intrepid --arch amd64 --url http://security.ubuntu.com/ubuntu/pool/universe/s/squid/squid-cgi_2.7.STABLE3-1ubuntu2.1_amd64.deb --url-size 119880 --url-md5 27ff06a902debe143acb7b3959fb1c52
usn.py $DB $USN --release intrepid --arch powerpc --url http://ports.ubuntu.com/pool/main/s/squid/squid_2.7.STABLE3-1ubuntu2.1_powerpc.deb --url-size 777958 --url-md5 b9d530e92ad4638fb8d169ef55eb33f4

So what we get from the changes is the release, version, arch, size, and checksum of the debs and source packages. Our script calculates the url using:
1. the architecture in the changes file (we have a mapping of which archs go to security.u.c vs ports.u.c)
2. the component we find based on Sources and Packages files that we locally mirror (icky).

Re USN generation> Yes. We ask a LOSA to unembargo and then we start to generate our USN. You can see our full process at https://wiki.ubuntu.com/SecurityUpdateProcedures#Soyuz.