oss-sec mailing list archives

Re: CVE request: openssl timing attack

From: Michael Gilbert <michael.s.gilbert () gmail com>
Date: Sat, 4 Jun 2011 14:53:29 -0400

Solar Designer wrote:

I went to http://www.us-cert.gov/cas/signup.html to see if there's a
public CERT mailing list I should be on in order to receive new
Vulnerability Notes (that are being made public) with no delay (or at
least with less delay).  Unfortunately, for Vulnerability Notes there
appears to be an Atom feed only, no mailing list (which I'd prefer).
Perhaps set one up?


As a practical matter, you could follow the Debian
secure-testing-commits mailing list [0] or check out the svn repo [1].
Updates to Mitre's CVE database are synced there twice a day.


Unfortunately, Mitre's databases pushes tend to have a couple day delay
built in.  I've been intending to convert to the NVD database, which
seems to get updated on exactly the disclosure date, but I haven't
gotten around to that yet.

Best wishes,
Mike

[0]http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
[1]svn://svn.debian.org/svn/secure-testing

Current thread:

CVE request: openssl timing attack Thomas Biege (May 31)
- Re: CVE request: openssl timing attack Josh Bressers (May 31)
  - Re: CVE request: openssl timing attack Solar Designer (Jun 01)
    - Re: CVE request: openssl timing attack Michael Gilbert (Jun 04)
    - Re: CVE request: openssl timing attack Solar Designer (Jun 04)