Re: Assistance Requested: History and Patching

2016-07-27 Thread Paul Wise
On Thu, Jul 28, 2016 at 5:58 AM, Gunnar Wolf wrote:

> I will add to the information already replied by Martin: We had at
> some point a patch tracker in Debian (was called
> patch-tracker.debian.org), but it sadly was decomissioned some time
> ago.

FYI it was replaced by patches info on sources.d.n:

https://sources.debian.net/patches/

-- 
bye,
pabs

https://wiki.debian.org/PaulWise



Re: Assistance Requested: History and Patching

2016-07-27 Thread Hans-Georg Bork
Hi Dan,

On 07/27/2016 09:23 PM, Clarke, Daniel (US - Arlington) wrote:
> My name is Dan and I have been given the following task by my client:
> What is the history of Debian, and, specifically, whether there is a
> central authority that publishes patches and what is their credibility?

the history can be found here
https://www.debian.org/doc/manuals/project-history/

The other questions seem to be answered already. Have fun.

-- hgb



Re: Assistance Requested: History and Patching

2016-07-27 Thread Gunnar Wolf
Clarke, Daniel (US - Arlington) dijo [Wed, Jul 27, 2016 at 07:23:23PM +]:
> Good Afternoon,
> 
> My name is Dan and I have been given the following task by my
> client: What is the history of Debian, and, specifically, whether
> there is a central authority that publishes patches and what is
> their credibility?
> 
> Please let me know if you have any questions.
> 
> I greatly appreciate your time and assistance with this effort.

I will add to the information already replied by Martin: We had at
some point a patch tracker in Debian (was called
patch-tracker.debian.org), but it sadly was decomissioned some time
ago.

There are, however, many ways to find the relevant patchs for packages
you might need. You can:

- If you know which project/package you are interested in, the package
  tracker¹ can give you detailed status information on it. On the
  right side, click on "browse source code". Many (note that not all)
  packages have all of their patches to the upstream project in the
  debian/patches directory.

- If you want to compare the packaging between Debian and its
  derivatives, you can look at the Debian derivatives patches.²

- Not Debian-specific, but you can be interested in the per-vendor
  patch-finding information³ page by oss-security.

¹ https://tracker.debian.org
² http://deriv.debian.net/patches/
³ http://oss-security.openwall.org/wiki/distro-patches

> This message (including any attachments) contains confidential
> information intended for a specific individual and purpose, and is
> protected by law. If you are not the intended recipient, you should
> delete this message and any disclosure, copying, or distribution of
> this message, or the taking of any action based on it, by you is
> strictly prohibited.

U... You do realize that sending this text to a publicly-archived
mailing list, at a message directed to just about anybody who might
reply, is a contradition in terms, right?



Re: Assistance Requested: History and Patching

2016-07-27 Thread Martin Michlmayr
Hi Dan,

* Clarke, Daniel (US - Arlington)  [2016-07-27 19:23]:
> My name is Dan and I have been given the following task by my
> client: What is the history of Debian, and, specifically, whether
> there is a central authority that publishes patches and what is
> their credibility?

Debian is a project which consists of many different people who
collaborate.  Debian is an OS integrator -- we take software developed
by other open source projects and integrate them into an operating
system by creating Debian packages of the software.

Updates are obtained from the original software developers.  Debian
makes some changes (for integration, bug fixes or other) but works
closely with the original developers of the software (such as the
Linux kernel, Firefox, and QEMU).

Security support for Debian's latest software release is provided
through the Debian security team.  Again, they work with the original
developers of the software on those fixes.  Debian backports security
fixes to the software in the stable release rather than adding new
software versions.

Official security support through the security team is provided for a
software release as long as it's the current stable release and for 12
more months from the time a new stable release is made.

The Debian Long Term Support (LTS) initiative provides further support
for a total of 5 years.  The Debian LTS initiative is primarily
sponsored through an outside company which engages Debian contributors
on a paid basis.

Here are some links:
https://www.debian.org/security/faq
https://wiki.debian.org/LTS/

Debian maintains a list of consultants who can be engaged for paid
work:
https://www.debian.org/consultants/

I hope this information is useful.

-- 
Martin Michlmayr
http://www.cyrius.com/



Assistance Requested: History and Patching

2016-07-27 Thread Clarke, Daniel (US - Arlington)
Good Afternoon,

My name is Dan and I have been given the following task by my client: What is 
the history of Debian, and, specifically, whether there is a central authority 
that publishes patches and what is their credibility?

Please let me know if you have any questions.

I greatly appreciate your time and assistance with this effort.

Thank you.

Daniel P. Clarke
Consultant | Deloitte Advisory, Technology Risk
Deloitte & Touche LLP
1919 N. Lynn St., Arlington, VA 22209
Tel/Dir: +1 571 882 7274  | Mobile: +1 571 302 1931
dacla...@deloitte.com | www.deloitte.com





This message (including any attachments) contains confidential information 
intended for a specific individual and purpose, and is protected by law. If you 
are not the intended recipient, you should delete this message and any 
disclosure, copying, or distribution of this message, or the taking of any 
action based on it, by you is strictly prohibited.

v.E.1