Groups > comp.lang.python.announce > #2634

New security-announce@python.org mailing list

Path	csiph.com!fu-berlin.de!uni-berlin.de!not-for-mail
From	Barry Warsaw <barry@python.org>
Newsgroups	comp.lang.python.announce
Subject	New security-announce@python.org mailing list
Date	Thu, 21 Sep 2017 11:30:57 -0400
Lines	81
Approved	python-announce-list@python.org
Message-ID	<mailman.131.1506011347.2730.python-announce-list@python.org> (permalink)
References	<DED92900-E2A3-4AF7-BF2A-00A4B7918B96@python.org>
Mime-Version	1.0 (Mac OS X Mail 10.3 \(3273\))
Content-Type	multipart/signed; boundary="Apple-Mail=_5FEA03F1-F86E-485E-BFD6-79158863817B"; protocol="application/pgp-signature"; micalg=pgp-sha256
X-Trace	news.uni-berlin.de bGBZaENxdL+DWwIoeiN4xQQUlOB7D9wLsMYeU8p+vM3A==
Return-Path	<barry@python.org>
X-Original-To	python-announce-list@python.org
Delivered-To	python-announce-list@mail.python.org
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/simple; d=python.org; s=200901; t=1506007859; bh=ULvsafeP4qfe3WejjoeTaRBHgBwAdTESYb1AW7+gHbk=; h=From:Subject:Date:Cc:To:From; b=HUoo/Wp3HtkQIOWXrkszXDuOwXgPfsVmtAedlTyDMAoAKg2uMzl/PchloH6u+eUUG N1rPlNwIaZwuJYq1VPSQiMehilZbYxfovfWg+usBUjpQ/n/WNNrcrVUL5KBne5dr0M wJVFlgb9CWMCGgf4dYzUY23TspCCwTC5kPuhWV7Y=
X-Spam-Status	OK 0.002
X-Spam-Evidence	'H': 1.00; 'S': 0.00; 'python,': 0.02; '\xe2\x80\x94': 0.05; 'redirected': 0.07; 'python': 0.09; 'cc:addr :python-list': 0.09; 'filename:fname piece:signature': 0.09; 'fixed,': 0.09; 'from:name:barry warsaw': 0.09; 'contribute': 0.15; '(on': 0.15; 'at,': 0.16; 'content- disposition:attachment;\r\n\tfilename=signature.asc': 0.16; 'content-type:application/pgp-signature': 0.16; 'content- type:multipart/signed': 0.16; 'ecosystem': 0.16; 'filename:fname piece:asc': 0.16; 'filename:fname:signature.asc': 0.16; 'from:addr:barry': 0.16; 'generally,': 0.16; 'message- id:@python.org': 0.16; 'one-way': 0.16; 'received:192.168.11': 0.16; 'received:216.15': 0.16; 'received:216.15.33': 0.16; 'received:216.15.33.194': 0.16; 'received:mail.wooz.org': 0.16; 'received:wooz.org': 0.16; 'situation.': 0.16; 'way:': 0.16; 'we\xe2\x80\x99ve': 0.16; 'see:': 0.18; 'mailman': 0.19; 'cc:21': 0.21; 'cheers,': 0.22; 'community.': 0.22; 'publicly': 0.22; 'cc:addr:python.org': 0.22; 'from:addr:python.org': 0.22; 'subject:list': 0.23; 'url:io': 0.23; 'cc:no real name:20': 0.25; 'discussion': 0.26; 'announcement': 0.27; 'becomes': 0.27; 'i\xe2\x80\x99m': 0.27; 'url:mailman': 0.28; 'always,': 0.29; 'subject:security': 0.29; 'void': 0.29; 'related': 0.29; 'announce': 0.31; 'primary': 0.31; 'subject:mailing': 0.31; 'url:listinfo': 0.32; 'community': 0.32; 'url:python': 0.33; 'list.': 0.33; 'list': 0.33; 'url:mail': 0.36; 'received:org': 0.36; 'url:org': 0.37; 'should': 0.37; 'email addr:python.org': 0.37; 'list,': 0.37; 'mailing': 0.37; 'done': 0.38; 'subject:-': 0.38; 'behalf': 0.39; 'received:192': 0.39; 'proto:https': 0.39; 'to:addr:python.org': 0.39; 'received:192.168': 0.39; 'received:io': 0.39; 'received:psf.io': 0.39; 'received:ams1.psf.io': 0.40; 'received:mail1.ams1.psf.io': 0.40; 'issue': 0.40; 'secure': 0.60; 'url:news': 0.61; 'us,': 0.61; 'believe': 0.61; 'providing': 0.62; 'more': 0.62; 'header:Message- Id:1': 0.62; 'is.': 0.63; 'information': 0.63; 'great': 0.63; 'received:216': 0.63; 'high': 0.64; 'our': 0.65; 'you\xe2\x80\x99ve': 0.66; 'here': 0.66; 'contact': 0.66; 'subject:@': 0.71; 'to:addr:python-announce-list': 0.72; 'low': 0.89; 'pfxlen:2': 0.91; 'subject:announce': 0.93
X-Virus-Scanned	Debian amavisd-new at mail.wooz.org
X-Spam-Flag	NO
X-Spam-Score	-2.9
X-Spam-Level
X-Spam-Status	No, score=-2.9 tagged_above=-9999 required=6 tests=[ALL_TRUSTED=-1, BAYES_00=-1.9] autolearn=ham autolearn_force=no
X-Mao-Original-Outgoing-Id	527700656.88769-2fb54f1a3993c0c6ec0c12f6db7b2722
X-Mailer	Apple Mail (2.3273)
X-Mailman-Approved-At	Thu, 21 Sep 2017 12:29:06 -0400
X-BeenThere	python-announce-list@python.org
X-Mailman-Version	2.1.24
Precedence	list
List-Id	Announcement-only list for the Python programming language <python-announce-list.python.org>
List-Unsubscribe	<https://mail.python.org/mailman/options/python-announce-list>, <mailto:python-announce-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-announce-list/>
List-Post	<mailto:python-announce-list@python.org>
List-Help	<mailto:python-announce-list-request@python.org?subject=help>
List-Subscribe	<https://mail.python.org/mailman/listinfo/python-announce-list>, <mailto:python-announce-list-request@python.org?subject=subscribe>
X-Mailman-Original-Message-ID	<DED92900-E2A3-4AF7-BF2A-00A4B7918B96@python.org>
Xref	csiph.com comp.lang.python.announce:2634

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

I’m happy to announce the availability of a new mailing list, with the mission of providing security announcements to the Python community from the Python Security Response Team (PSRT):

security-announce@python.org

You can sign up in the usual Mailman way:

https://mail.python.org/mailman/listinfo/security-announce

This joins our suite of security related forums.  As always, if you believe you’ve found a security issue in Python, you should contact the PSRT directly and securely via:

security@python.org

For more information on how you can contact us, see:

https://www.python.org/news/security/

We also have a public security-focused discussion mailing list that you can subscribe and contribute to.

security-sig@python.org
https://mail.python.org/mailman/listinfo/security-sig

Please don’t report security vulnerabilities here, since this is a publicly archived mailing list.  We welcome you to collaborate here to help make Python and its ecosystem even more secure than it already is.

Once a security vulnerability is identified and fixed, it becomes public knowledge.  Generally, these are captured in a ReadTheDocs site for posterity:

https://python-security.readthedocs.io/

This new security-announce mailing list fills a void — one-way communication about security related matters from the PSRT back to the community.  This is an area that we’ve not done a great job at, frankly, and this new announcement list is intended to improve that situation.  The PSRT will use this low traffic, high value forum as the primary way the PSRT will communicate security issues of high importance back to the wider Python community.  All follow-ups to postings to this list are redirected to the security-sig mailing list.

Cheers,
-Barry (on behalf of the PSRT)

Back to comp.lang.python.announce | Previous | Next | Find similar | Unroll thread

Thread

New security-announce@python.org mailing list Barry Warsaw <barry@python.org> - 2017-09-21 11:30 -0400

csiph-web