download debian files

Asked by ERIC LAMONT YOUNG

How do I download just the debian file associated with a security patch?

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu glibc Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Manfred Hampl (m-hampl) said :
#1

What exactly do you want to download?
In Ubuntu there should not be the need for manual downloads. Standard way of working is using the package management programs of Ubuntu for updates, and that will automatically install updated versions of programs with security patches when available.

Revision history for this message
ERIC LAMONT YOUNG (ericyoung1) said :
#2

We are an enterprise, deploying over 3000 systems with Ubuntu OS. We often use the Tannium tool to automate security patching using the .rpm for RHEL or .deb file for Ubuntu to create packages to assist in the automation. For many Ubuntu patches, I have been able to download, and unzip the .tar file to just have the .deb folder, in which we then create the packages for deployment using Tanium.

Revision history for this message
Manfred Hampl (m-hampl) said :
#3

I am sorry, but I still do not understand what you need.
Do you want to build your own version of the *.deb package file?

Revision history for this message
ERIC LAMONT YOUNG (ericyoung1) said :
#4

Not really build my own version. I just need only the patch/update files in the .deb file. If you need, you can call me to further clarify. My number is 817.992.6168.

Revision history for this message
Manfred Hampl (m-hampl) said :
#5

The patch files are the difference in the source. see e.g. https://git.launchpad.net/ubuntu/+source/glibc/tree/debian/patches/any/CVE-2024-2961.patch

They do not help unless you build your own package. What do you want to do with them if you don't build your own version?

Revision history for this message
ERIC LAMONT YOUNG (ericyoung1) said :
#6

I don't actually build a patch package. I build a deployment package. I take the .deb files, package them together, if more than one is needed for a particular vulnerability, and then run a bash script to deploy the patches.

Revision history for this message
Manfred Hampl (m-hampl) said (last edit ):
#7

In Debian/Ubuntu the patch file contains the difference in source. You do not deploy the patch file, but you must deploy the new *.deb file that is built from the source which has been modified by the patch files.

(I know that there are some other systems, where it is possible to distribute a patch file that contains the difference in the already-installed executable files, but this is not the case in Debian/Ubuntu.)

Can you help with this problem?

Provide an answer of your own, or ask ERIC LAMONT YOUNG for more information if necessary.

To post a message you must log in.