You are not logged in.
Pages: 1
Hi, I've noticed the security advisories mailing list and security advisories page is no longer being updated since April. How are security advisories being distributed now?
I've located this page, but it hasn't been updated since July.
https://security.archlinux.org/
Perhaps there's a different mailing list now?
Offline
No, there is none. You are at the right place. While advisories are not updated for now, issues tracker log shows activity. If you use arch-audit for vulnerabilities monitoring, you will still get the warnings.
This is an not an authoritative answer, but from various exchanges with the security team a particular picture may be seen. The picture is: maintaining this list is tedious, manual work and involves processing huge amounts of unstructured data. No queue of volunteers for this thankless job. Do not read this as the security team not treating the task seriously: it’s just limits of how much a human can do.
Offline
Pages: 1