LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (http://www.linuxquestions.org/questions/linux-security-4/)
-   -   IYO(in your opinion) Best security/vulnerability Mailing list (http://www.linuxquestions.org/questions/linux-security-4/iyo-in-your-opinion-best-security-vulnerability-mailing-list-369398/)

MitchM99 10-03-2005 11:15 AM

IYO(in your opinion) Best security/vulnerability Mailing list
 
I'm currently subscribed to


My servers run Gentoo:
gentoo-announce (GLSA)
gentoo-security
gentoo-hardened


MY laptops use Ubuntu
ubuntu-security-announce


My question is where do they get thier info from? Can we get on those lists?

Thanks!

ilikejam 10-03-2005 11:26 AM

Hi.

Have a look at:
Secunia
and
Security Focus
for starters.

Dave

MitchM99 10-03-2005 11:40 AM

Hey Dave, Thanks for the reply!

Quote:

Originally posted by ilikejam
Hi.

Have a look at:
Secunia



nice site for a combined single source for all distro released security updates. from what I saw this is just a list of ther released updates.

Quote:

and
Security Focus
for starters.

Dave
not bad either, but it's not Linux only. There is a bunch of stuff to filter through.

Any linux only sites?

I also found

http://www.packetstormsecurity.org
http://www.linuxsecurity.com


Thanks!

Vgui 10-03-2005 04:16 PM

I don't know if this is what you are looking for, but LWN keeps a list of distro specific vulnerabilities. I'm sure there is a mailing list somewhere on there:
http://lwn.net/
and a bit less broad:
http://lwn.net/security

Capt_Caveman 10-03-2005 10:05 PM

I'd recommend the Gentoo lists as most advisories will be coming directly from the Gentoo security team. Also Linux Advisory Watch from linuxsecurity.com is a fairly concise list that has Gentoo advisories listed regulary. I wouldn't recommend it for all distros though as only 3-4 list advisories there on a consistent basis. Bugtraq and Full-Disclosure are going to be the most bleeding edge, but are high-traffic and there's alot of garbage to sort through (viruses, asshats posting malicious scripts, flamewars, etc).

MitchM99 10-04-2005 08:23 AM

I have yet to be disapointed with gentoo's lists, I was just looking for other sources.

I've seen the LAW list before, seems good for a mass distro lsit. not two interested in bugtraq stuff to be honest.

I have to say the gentoo team is pretty good at findinig these things from what I've seen.

Thanks!

:jawa:

KneeLess 10-04-2005 10:33 PM

Err, bugtraq? Full disclosure if you check your e-mail periodically. Don't have enough space? That's why I use gmail for it. :)


All times are GMT -5. The time now is 05:09 AM.