Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 4 Jun 2011 14:53:29 -0400
From: Michael Gilbert <michael.s.gilbert@...il.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: openssl timing attack

Solar Designer wrote:
> I went to http://www.us-cert.gov/cas/signup.html to see if there's a
> public CERT mailing list I should be on in order to receive new
> Vulnerability Notes (that are being made public) with no delay (or at
> least with less delay).  Unfortunately, for Vulnerability Notes there
> appears to be an Atom feed only, no mailing list (which I'd prefer).
> Perhaps set one up?

As a practical matter, you could follow the Debian
secure-testing-commits mailing list [0] or check out the svn repo [1].
Updates to Mitre's CVE database are synced there twice a day.


Unfortunately, Mitre's databases pushes tend to have a couple day delay
built in.  I've been intending to convert to the NVD database, which
seems to get updated on exactly the disclosure date, but I haven't
gotten around to that yet.

Best wishes,
Mike

[0]http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
[1]svn://svn.debian.org/svn/secure-testing

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.