#mailing-list

0 stories this week · 5 this month · 8 in 6 months · mostly security

Stories per day · 30 days

8 stories, newest first · one card per story

Jan Schaumann says reporting stays cheaper than analysis, fixes, and long-term software maintenance.

Martin Steigerwald says fixed AI-found bugs should not be reported again, then harder bugs may follow.

oss-security contributors propose digests or a separate list to manage a flood of AI vulnerability reports.

Peter Gutmann backs splitting oss-security so Apache CVE floods do not bury the main list.

Solar Designer says oss-security volume and subscriber churn remain elevated amid AI vulnerability-report floods.

oss-security thread on the gpg.fail retrospective discusses legacy code removal and flaws surfaced by frontier AI models in open-source projects.

Solar Designer finds little similarity between recent LLM-generated fake advisories on oss-security beyond missing Date headers.

oss-security moderator Solar Designer says he may reject repetitive AI-generated postings after debate over AI slop submissions.

Stories tagged #mailing-list