IYO(in your opinion) Best security/vulnerability Mailing list

MitchM99 · 10-03-2005, 11:15 AM

I'm currently subscribed to

My servers run Gentoo:
gentoo-announce (GLSA)
gentoo-security
gentoo-hardened

MY laptops use Ubuntu
ubuntu-security-announce

My question is where do they get thier info from? Can we get on those lists?

Thanks!

ilikejam · 10-03-2005, 11:26 AM

Hi.

Have a look at:
Secunia
and
Security Focus
for starters.

Dave

MitchM99 · 10-03-2005, 11:40 AM

Hey Dave, Thanks for the reply!

Quote:

Originally posted by ilikejam
Hi.

Have a look at:
Secunia

nice site for a combined single source for all distro released security updates. from what I saw this is just a list of ther released updates.

Quote:

and
Security Focus
for starters.

Dave

not bad either, but it's not Linux only. There is a bunch of stuff to filter through.

Any linux only sites?

I also found

http://www.packetstormsecurity.org
http://www.linuxsecurity.com

Thanks!

Vgui · 10-03-2005, 04:16 PM

I don't know if this is what you are looking for, but LWN keeps a list of distro specific vulnerabilities. I'm sure there is a mailing list somewhere on there:
http://lwn.net/
and a bit less broad:
http://lwn.net/security

Capt_Caveman · 10-03-2005, 10:05 PM

I'd recommend the Gentoo lists as most advisories will be coming directly from the Gentoo security team. Also Linux Advisory Watch from linuxsecurity.com is a fairly concise list that has Gentoo advisories listed regulary. I wouldn't recommend it for all distros though as only 3-4 list advisories there on a consistent basis. Bugtraq and Full-Disclosure are going to be the most bleeding edge, but are high-traffic and there's alot of garbage to sort through (viruses, asshats posting malicious scripts, flamewars, etc).

MitchM99 · 10-04-2005, 08:23 AM

I have yet to be disapointed with gentoo's lists, I was just looking for other sources.

I've seen the LAW list before, seems good for a mass distro lsit. not two interested in bugtraq stuff to be honest.

I have to say the gentoo team is pretty good at findinig these things from what I've seen.

Thanks!

KneeLess · 10-04-2005, 10:33 PM

Err, bugtraq? Full disclosure if you check your e-mail periodically. Don't have enough space? That's why I use gmail for it.