IYO(in your opinion) Best security/vulnerability Mailing list
 

I'm currently subscribed to


My servers run Gentoo:
gentoo-announce (GLSA)
gentoo-security
gentoo-hardened


MY laptops use Ubuntu
ubuntu-security-announce


My question is where do they get thier info from? Can we get on those lists?

Thanks!

Hi.

Have a look at:
Secunia
and
Security Focus
for starters.

Dave

Hey Dave, Thanks for the reply!



nice site for a combined single source for all distro released security updates. from what I saw this is just a list of ther released updates.

Quote:

and Security Focus for starters. Dave

not bad either, but it's not Linux only. There is a bunch of stuff to filter through.

Any linux only sites?

I also found

http://www.packetstormsecurity.org
http://www.linuxsecurity.com


Thanks!

I don't know if this is what you are looking for, but LWN keeps a list of distro specific vulnerabilities. I'm sure there is a mailing list somewhere on there:
http://lwn.net/
and a bit less broad:
http://lwn.net/security

I'd recommend the Gentoo lists as most advisories will be coming directly from the Gentoo security team. Also Linux Advisory Watch from linuxsecurity.com is a fairly concise list that has Gentoo advisories listed regulary. I wouldn't recommend it for all distros though as only 3-4 list advisories there on a consistent basis. Bugtraq and Full-Disclosure are going to be the most bleeding edge, but are high-traffic and there's alot of garbage to sort through (viruses, asshats posting malicious scripts, flamewars, etc).

I have yet to be disapointed with gentoo's lists, I was just looking for other sources.

I've seen the LAW list before, seems good for a mass distro lsit. not two interested in bugtraq stuff to be honest.

I have to say the gentoo team is pretty good at findinig these things from what I've seen.

Thanks!

:jawa:

Err, bugtraq? Full disclosure if you check your e-mail periodically. Don't have enough space? That's why I use gmail for it. :)