Locations of bug-trackers, packaging repositories and files such as patches and changes to the upstream source.

There's a similar wiki page at http://oss-security.openwall.org/wiki/distro-patches

Debian

• Package format: deb
• Package:
  • http://packages.debian.org/$PACKAGE (binary packages, user-oriented)
  • http://packages.qa.debian.org/$PACKAGE (source packages, developer-oriented)
• BTS:
  • http://bugs.debian.org
  • http://bugs.debian.org/$PACKAGE
  • http://bugs.debian.org/src:$PACKAGE
• Changes: integrated in the package format in the .diff.gz
• Patches:
  • http://patch-tracker.debian.org (per source package listing of which patches have been applied by Debian)
  • there are several patch systems like quilt, dpatch, ... to store separated patches
• VCS: several used, go on http://packages.qa.debian.org/$PACKAGE and check the Vcs-* link at the top-left of the page
  • VCS-indexes can be found at http://git.debian.org , http://svn.debian.org, etc.
• Homepage: location stored in the Homepage-field *
• Wiki: http://wiki.debian.org
• CVE: http://security-tracker.debian.org/tracker/$CVE

Exherbo

• Package format: exheres (source-based build recipe)
• Packages: http://git.exherbo.org/summer/
• BTS: https://bugs.exherbo.org/
• VCS: http://git.exherbo.org/
• Homepage: http://www.exherbo.org/

Fedora

• Package format: .rpm
• Packages: https://admin.fedoraproject.org/pkgdb
• Updates & QA: http://admin.fedoraproject.org/updates
• BTS:
  • https://bugzilla.redhat.com
  • http://bugz.fedoraproject.org/$PACKAGE
• VCS: http://pkgs.fedoraproject.org/gitweb/?p=$PACKAGE.git
• Translations: https://translate.fedoraproject.org
• Wiki: https://fedoraproject.org/wiki/
• CVE: https://bugzilla.redhat.com/show_bug.cgi?id=$CVE

Foresight

• Package format: conary
• Packages: http://www.rpath.com/rbuilder/repos/foresight/browse
• BTS: https://issues.foresightlinux.org
• VCS: http://www.foresightlinux.org/hg
• Wiki: https://wiki.foresightlinux.org/dashboard.action

FreeBSD

• Packages: http://www.freshports.org/ (what I use to take a look)
• BTS: http://www.freebsd.org/support/bugreports.html
• VCS: http://www.freebsd.org/cgi/cvsweb.cgi/ports/

Gentoo

• Packages (QA): http://packages.gentoo.org/
• BTS: http://bugs.gentoo.org/
• VCS: http://sources.gentoo.org/viewcvs.py/gentoo-x86/
• CVE: http://bugs.gentoo.org/show_bug.cgi?id=$CVE

gNewSense

• Package format: .deb
• Packages page: n/a, we usually use http://packages.ubuntu.com/ and search 'hardy'
• BTS: http://bugs.gnewsense.org/
• VCS: http://svn.gnewsense.svnhopper.net/gnewsense/builder/trunk/
• Changes: applied by scripts found in VCS

GoboLinux

• Packages: http://gobolinux.org/?page=packages
• BTS: http://bugs.gobolinux.org/
• VCS: http://svn.gobolinux.org
• Recipes: http://recipes.gobolinux.org/

Mageia

• Package format: .rpm
• Package/maintainer lists: http://pkgsubmit.mageia.org/data/maintdb.txt
• Packages: http://sophie.zarb.org/ (unofficial)
• Bugs: http://bugs.mageia.org/
• VCS: http://svnweb.mageia.org/packages/cauldron/ or svn://svn.mageia.org/svn/packages/cauldron/ (development tree), contains specs and all sources/patches
• Wiki: http://wiki.mageia.org/

Mandriva

• Package format: .rpm
• Package/maintainer lists: http://maintainers.mandriva.com/
• Packages: http://sophie.zarb.org/ (unofficial)
• Bugs: http://qa.mandriva.com/
• VCS: http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/ (development tree), contains specs and all sources/patches
• Wiki: http://wiki.mandriva.com

openSUSE

• Package format: rpm
• Packages: http://en.opensuse.org/Package_repositories
• Package QA: http://en.opensuse.org/Portal:How_to_participate
• BTS: https://bugzilla.novell.com
• Changes: integrated in the package format and through build server history checkins
• Source packages and Patches: browsable at https://build.opensuse.org/project/show?project=openSUSE%3AFactory
• VCSes: http://gitorious.org/opensuse
• Homepage: http://www.opensuse.org/
• Wiki: http://en.opensuse.org/
• CVE: http://support.novell.com/security/cve/$CVE.html

Openwall GNU/*/Linux (Owl)

• Package format: rpm
• Packages: /pub/Owl/current/*/RPMS/ on the FTP mirrors
• Changes: http://www.openwall.com/Owl/CHANGES-current.shtml for major changes (minor ones are documented in CVS commits and package %changelogs only)
• VCS: http://cvsweb.openwall.com
• Wiki: http://openwall.info/wiki/Owl
• Homepage: http://www.openwall.com/Owl/

Pardus

• Package format: .pisi
• Packages: http://packages.pardus.org.tr/
• BTS: http://bugs.pardus.org.tr/
• VCS:
  • Packages - http://svn.pardus.org.tr/pardus/
  • Projects - http://svn.pardus.org.tr/uludag/
• Changes & Patches: Included in source packages *
• Translations: http://translate.pardus.org.tr

Ubuntu

• Package format: .deb
• Packages:
  • http://packages.ubuntu.com/
  • https://launchpad.net/ubuntu/+source/$PACKAGE for source packages
• BTS: http://bugs.launchpad.net/ubuntu
• VCS: sometimes you have to consider the VCS used by the Debian developer and a VCS used by a MOTU (usually http://code.launchpad.net/ubuntu )
• Changes: same format as Debian
• Wiki: http://wiki.ubuntu.com
• Translations: http://translations.launchpad.net/ubuntu
• Feature requests: http://brainstorm.ubuntu.com/
• Blueprints (feature specifications tracker): http://blueprints.launchpad.net/ubuntu
• CVE: https://launchpad.net/bugs/cve/$CVE
• CVE: http://people.canonical.com/~ubuntu-security/cve/$CVE

Yoper

• Package format: rpm
• Packages: http://development.yoper.com/pub/devel/source-cache/
• Package QA:
  • http://www.yoper.com/wiki
  • http://www.yoper.com/forum/
• BTS: http://www.yoper.com/bugtracker
• Changes: Automatic, through build server history checkins
• patches: Hardly any patches, one of he principles of Yoper. Back to the source and optimised for the purpose.
• VCSes: svn+ssh://development.yoper.com/thinktank
• Homepage: http://www.yoper.com