[<prev] [<thread-prev] [day] [month] [year] [list]
Message-ID: <9a1009d7-4a36-4d06-a31e-e4fbc5b7a906@griffin-web.studio>
Date: Sat, 17 Oct 2026 21:59:58 +0000
From: Rihards Simanovics <security@...ffin-web.studio>
To: oss-security@...ts.openwall.com
Subject: Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
On 17/10/2026 21:17, Peter Gutmann wrote:
> Solar Designer<solar@...nwall.com> writes:
>
>> The second one is 39 messages for Apache Camel today, which are similarly
>> going to be replaced by one message on Monday (I'm told).
> I was actually going to request whether the neverending Apache avalanche could
> be turned into a daily digest with links to the individual disclosures if
> anyone really cared about them.
Agree with Peter, and I'd suggest extending this beyond Apache. Any
project sending say more than two or three advisories in a day could
consolidate them into a single digest, with links to the relevant
entries in the usual vulnerability databases (NVD, GHSA, the project's
own advisory pages, etc). That would keep the list readable while still
giving anyone who cares a quick path to the details.
Rihards
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
