Re: zip and unzip

On Mon, Dec 16, 2019 at 08:30:22AM -0500, LM wrote:
> 
> Was wondering what resources others use to look up security issues and
> fixes.  I typically just check some of the main distributions (like Debian)
> and see what patches they've added to deal with security.  I'm sure there
> are better ways to keep up with that type of information.  Any
> recommendations?  Thanks.
> 
Hi Laura,

for CPU vulnerabilities, I mostly seem to find them at the register
these days (www.theregister.co.uk).  More generally, lwn.net (I'm a
subscriber, but I think the security updates are available
immediately for everyone - everything else has a 2-week delay for
non-subscribers).  But these days a lot of the information is often
for very old versions (centos, suse, not just debian and its
derivatives).

I also read oss-security when my upstream doesn't bounce the mails
for failing validation, but most of that is not interesting to me.

ĸen
-- 
          We've all got both light and dark inside of us.
          What matters is the part we choose to act on.
                                              -- Sirius Black
-- 
http://lists.linuxfromscratch.org/listinfo/lfs-chat
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page