[NMLUG] Debian patch question

[dkeith at swcp.com (Daniel Selders)]

I've heard a little bit about the problems with Debian and security 
updates, but I'm not sure if I understand.

If there is a bug in, lets say, sshd, how long is the lag between the 
main source being patched and the Debian Woody package being patched?  
If the lag is considerable, and the source tar has a deb directory in 
it, can't one just download the source and compile it into a deb 
package, and then install it?  That way they don't have to wait for the 
Debian sites to be updated?

Daniel Selders