Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20231217205642.GA7164@openwall.com>
Date: Sun, 17 Dec 2023 21:56:42 +0100
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Cc: Jonathan Wright <jonathan@...alinux.org>,
	Andrew Lukoshko <alukoshko@...alinux.org>,
	benny Vasquez <benny@...alinux.org>,
	Igor Seletskiy <iseletsk@...alinux.org>,
	Darya Malyavkina <dmalyavkina@...udlinux.com>,
	Jack Aboutboul <jack@...alinux.org>
Subject: Re: AlmaLinux Distros List Application

Hi,

On Tue, Dec 12, 2023 at 02:35:35PM -0600, Jonathan Wright wrote:
> I'm submitting this application on behalf of the AlmaLinux OS Foundation.
> 
> Myself (Jonathan Wright) and Andrew Lukoshko, our lead architect, would be
> joining if approved.

This looks reasonable to me.

>       Historically we have been following Red Hat releases within 1-2 days,
>       and since our shift in June away from following Red Hat we have been able
>       to release some security updates ahead of Red Hat (Iperf3 patch and AMD
>       microcode/kernel patches specifically). We would not be beholden to CentOS
>       Stream updates for our patch releases.

This isn't a lot yet.  I suppose linux-distros membership would enable
you to do ahead of Red Hat updates more often?

>       Immediately we can begin to help reporters ensure their reports are
>       following the requirements and are confirmed/replied to. As we
> advance our
>       understanding of how things operate, and the need arises, we can
> expand our
>       work into contributing more deeply.

These tasks are already accepted by some distros.  We can indeed
re-assign, so that those older members handle more complex tasks
instead, or maybe you'd volunteer for some of the tasks from the
"Administrative tasks mostly unrelated to (linux-)distros lists (but
relevant to the wider community)" category?  This category is
essentially about expanding and improving the public oss-security
content and its visibility.

>       Darya Malyavkina from CloudLinux will vouch for us.

For others reading this - Darya has been on linux-distros for CloudLinux
for a long while, so this satisfies the requirement as written.

Alexander

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.