[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20210110183829.GA2703@openwall.com>
Date: Sun, 10 Jan 2021 19:38:29 +0100
From: Solar Designer <solar@...nwall.com>
To: Yury German <blueknight@...too.org>
Cc: oss-security@...ts.openwall.com
Subject: Re: Gentoo's "contributing back" linux-distros tasks
On Mon, Oct 12, 2020 at 02:36:55PM -0400, Yury German wrote:
> On 10/12/20 8:30 AM, Solar Designer wrote:
> > 13. Keep track of per-report and per-issue handling and disclosure
> > timelines (at least times of notification of the private list and of
> > actual public disclosure), at regular intervals produce and share
> > statistics (most notably, the average embargo duration) as well as the
> > raw data (except on issues that are still under embargo) by posting to
> > oss-security - primary: Gentoo, backup: Amazon
> >
> > and we saw some contributions from Gentoo on these, most notable being
> > their work on the statistics (task 13 above):
> >
> > https://oss-security.openwall.org/wiki/mailing-lists/distros/stats
> >
> > Unfortunately, the last update of these statistics ("Last modified:
> > 2019/10/15 01:52 by kristianf") is also when the contributions ceased.
[...]
> Currently I have been maintaining the statistics for the list, but there
> was a time from October to January that I was off the list and do not
> have the archive of the messages. I will need to work with someone to
> fill out those statistics as K_F is currently not available.
>
> I will be able to continue with Task 13, and will catch up during the
> weekend.
We had some discussions on the above with Gentoo folks off-list. The
outcome is that Gentoo is unable to continue handling the statistics
task from the beginning of 2021 and on. Yury has left Gentoo's security
team (and thus is now unsubscribed from linux-distros), but is
nevertheless willing to update the statistics until the end of 2020 as
he had kindly offered, in his personal capacity. Thank you, Yury!
As to the missing period when Yury was off list, I am suggesting he uses
the headers-only archive I've just posted publicly to try and map issues
to oss-security postings. Where headers are not enough, Yury will need
to ping me or someone from Gentoo who was on the list at the time to
help match things.
Alexander
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
