oss-sec mailing list archives

Re: AlmaLinux Distros List Application


From: Solar Designer <solar () openwall com>
Date: Sun, 17 Dec 2023 21:56:42 +0100

Hi,

On Tue, Dec 12, 2023 at 02:35:35PM -0600, Jonathan Wright wrote:
I'm submitting this application on behalf of the AlmaLinux OS Foundation.

Myself (Jonathan Wright) and Andrew Lukoshko, our lead architect, would be
joining if approved.

This looks reasonable to me.

      Historically we have been following Red Hat releases within 1-2 days,
      and since our shift in June away from following Red Hat we have been able
      to release some security updates ahead of Red Hat (Iperf3 patch and AMD
      microcode/kernel patches specifically). We would not be beholden to CentOS
      Stream updates for our patch releases.

This isn't a lot yet.  I suppose linux-distros membership would enable
you to do ahead of Red Hat updates more often?

      Immediately we can begin to help reporters ensure their reports are
      following the requirements and are confirmed/replied to. As we
advance our
      understanding of how things operate, and the need arises, we can
expand our
      work into contributing more deeply.

These tasks are already accepted by some distros.  We can indeed
re-assign, so that those older members handle more complex tasks
instead, or maybe you'd volunteer for some of the tasks from the
"Administrative tasks mostly unrelated to (linux-)distros lists (but
relevant to the wider community)" category?  This category is
essentially about expanding and improving the public oss-security
content and its visibility.

      Darya Malyavkina from CloudLinux will vouch for us.

For others reading this - Darya has been on linux-distros for CloudLinux
for a long while, so this satisfies the requirement as written.

Alexander


Current thread: