From Fedora Project Wiki
Tracking Upstream
FEver
You can use ["PackageMaintainers/FEver"] - Fedora upstream tracking system.
File releases
- SourceForge projects: use the "Monitor" link (envelope icon) in project summary pages' file listings
- freshmeat.net project releases: use the "Subscribe to new releases" link at the bottom of project pages
- CPAN updates: WWW , RSS feed , mailing list
- GNOME projects: RSS feed , FTP release mailing list
- freedesktop.org projects: FTP release mailing list
Security
- Buqtraq, Full Disclosure, Vuln'Watch etc: mailing lists , feeds
Other distributions
Useful for cross-checking fixes etc.
- Many distros: http://oss-security.openwall.org/wiki/distro-patches
- Ubuntu: https://lists.ubuntu.com/mailman/listinfo/hardy-changes
- Debian: http://www.debian.org/distrib/packages#search_packages
- Gentoo: http://packages.gentoo.org/, http://viewcvs.gentoo.org/
- FreeBSD: http://www.freshports.org/
General
- ChangeDetection can be used to track any page for changes: http://www.changedetection.com/monitor.html
- Bookmarklet for most browsers (Konqueror users, add this to Tools->Minitools)
javascript:void(window.location='http://www.changedetection.com/detect.html?url='+escape(window.location)+'&email='+escape('your@email.here')) (I couldn't convince Wiki to make a right-clickable normal link of the above, sorry)
- http://www.linux.com/feature/132197 - Automatically watching Web sites for changes.
References
- http://fedoraproject.org/wiki/PackageMaintainers/WhyUpstream - Best practice guidelines on avoiding deviations from upstream projects.