Date: Sat, 4 Jun 2011 14:53:29 -0400 From: Michael Gilbert <michael.s.gilbert@...il.com> To: oss-security@...ts.openwall.com Subject: Re: CVE request: openssl timing attack Solar Designer wrote: > I went to http://www.us-cert.gov/cas/signup.html to see if there's a > public CERT mailing list I should be on in order to receive new > Vulnerability Notes (that are being made public) with no delay (or at > least with less delay). Unfortunately, for Vulnerability Notes there > appears to be an Atom feed only, no mailing list (which I'd prefer). > Perhaps set one up? As a practical matter, you could follow the Debian secure-testing-commits mailing list  or check out the svn repo . Updates to Mitre's CVE database are synced there twice a day. Unfortunately, Mitre's databases pushes tend to have a couple day delay built in. I've been intending to convert to the NVD database, which seems to get updated on exactly the disclosure date, but I haven't gotten around to that yet. Best wishes, Mike http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits svn://svn.debian.org/svn/secure-testing
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.