Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
Peter Gutmann backs splitting oss-security so Apache CVE floods do not bury the main list.
On oss-security, Peter Gutmann replied to a proposal for a separate vulnerability-reports list amid what the subject calls an AI “vulnpocalypse.” He said Apache CVE posts, not only Apache Camel, often fill his entire mail summary and suggested a daily digest with links. The message is about list volume and filtering, not a particular flaw or patch.
- Gutmann wants the Apache vulnerability flood turned into a daily digest
- He says Apache CVEs can fill an entire mail summary pane
- Thread proposes a separate oss-security vulnerability-reports list
- The post discloses no specific CVE, exploit, or affected version
- Products
- Apache Camel
- Organizations
- Apache Software Foundation
From the original article
Posted by Peter Gutmann on Oct 17 Solar Designer writes: I was actually going to request whether the neverending Apache avalanche could be turned into a daily digest with links to the individual disclosures if anyone really cared about them.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.