Path: csiph.com!fu-berlin.de!uni-berlin.de!not-for-mail From: Barry Warsaw Newsgroups: comp.lang.python.announce Subject: New security-announce@python.org mailing list Date: Thu, 21 Sep 2017 11:30:57 -0400 Lines: 81 Approved: python-announce-list@python.org Message-ID: References: Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Content-Type: multipart/signed; boundary="Apple-Mail=_5FEA03F1-F86E-485E-BFD6-79158863817B"; protocol="application/pgp-signature"; micalg=pgp-sha256 X-Trace: news.uni-berlin.de bGBZaENxdL+DWwIoeiN4xQQUlOB7D9wLsMYeU8p+vM3A== Return-Path: X-Original-To: python-announce-list@python.org Delivered-To: python-announce-list@mail.python.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=python.org; s=200901; t=1506007859; bh=ULvsafeP4qfe3WejjoeTaRBHgBwAdTESYb1AW7+gHbk=; h=From:Subject:Date:Cc:To:From; b=HUoo/Wp3HtkQIOWXrkszXDuOwXgPfsVmtAedlTyDMAoAKg2uMzl/PchloH6u+eUUG N1rPlNwIaZwuJYq1VPSQiMehilZbYxfovfWg+usBUjpQ/n/WNNrcrVUL5KBne5dr0M wJVFlgb9CWMCGgf4dYzUY23TspCCwTC5kPuhWV7Y= X-Spam-Status: OK 0.002 X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'python,': 0.02; '\xe2\x80\x94': 0.05; 'redirected': 0.07; 'python': 0.09; 'cc:addr :python-list': 0.09; 'filename:fname piece:signature': 0.09; 'fixed,': 0.09; 'from:name:barry warsaw': 0.09; 'contribute': 0.15; '(on': 0.15; 'at,': 0.16; 'content- disposition:attachment;\r\n\tfilename=signature.asc': 0.16; 'content-type:application/pgp-signature': 0.16; 'content- type:multipart/signed': 0.16; 'ecosystem': 0.16; 'filename:fname piece:asc': 0.16; 'filename:fname:signature.asc': 0.16; 'from:addr:barry': 0.16; 'generally,': 0.16; 'message- id:@python.org': 0.16; 'one-way': 0.16; 'received:192.168.11': 0.16; 'received:216.15': 0.16; 'received:216.15.33': 0.16; 'received:216.15.33.194': 0.16; 'received:mail.wooz.org': 0.16; 'received:wooz.org': 0.16; 'situation.': 0.16; 'way:': 0.16; 'we\xe2\x80\x99ve': 0.16; 'see:': 0.18; 'mailman': 0.19; 'cc:2**1': 0.21; 'cheers,': 0.22; 'community.': 0.22; 'publicly': 0.22; 'cc:addr:python.org': 0.22; 'from:addr:python.org': 0.22; 'subject:list': 0.23; 'url:io': 0.23; 'cc:no real name:2**0': 0.25; 'discussion': 0.26; 'announcement': 0.27; 'becomes': 0.27; 'i\xe2\x80\x99m': 0.27; 'url:mailman': 0.28; 'always,': 0.29; 'subject:security': 0.29; 'void': 0.29; 'related': 0.29; 'announce': 0.31; 'primary': 0.31; 'subject:mailing': 0.31; 'url:listinfo': 0.32; 'community': 0.32; 'url:python': 0.33; 'list.': 0.33; 'list': 0.33; 'url:mail': 0.36; 'received:org': 0.36; 'url:org': 0.37; 'should': 0.37; 'email addr:python.org': 0.37; 'list,': 0.37; 'mailing': 0.37; 'done': 0.38; 'subject:-': 0.38; 'behalf': 0.39; 'received:192': 0.39; 'proto:https': 0.39; 'to:addr:python.org': 0.39; 'received:192.168': 0.39; 'received:io': 0.39; 'received:psf.io': 0.39; 'received:ams1.psf.io': 0.40; 'received:mail1.ams1.psf.io': 0.40; 'issue': 0.40; 'secure': 0.60; 'url:news': 0.61; 'us,': 0.61; 'believe': 0.61; 'providing': 0.62; 'more': 0.62; 'header:Message- Id:1': 0.62; 'is.': 0.63; 'information': 0.63; 'great': 0.63; 'received:216': 0.63; 'high': 0.64; 'our': 0.65; 'you\xe2\x80\x99ve': 0.66; 'here': 0.66; 'contact': 0.66; 'subject:@': 0.71; 'to:addr:python-announce-list': 0.72; 'low': 0.89; 'pfxlen:2': 0.91; 'subject:announce': 0.93 X-Virus-Scanned: Debian amavisd-new at mail.wooz.org X-Spam-Flag: NO X-Spam-Score: -2.9 X-Spam-Level: X-Spam-Status: No, score=-2.9 tagged_above=-9999 required=6 tests=[ALL_TRUSTED=-1, BAYES_00=-1.9] autolearn=ham autolearn_force=no X-Mao-Original-Outgoing-Id: 527700656.88769-2fb54f1a3993c0c6ec0c12f6db7b2722 X-Mailer: Apple Mail (2.3273) X-Mailman-Approved-At: Thu, 21 Sep 2017 12:29:06 -0400 X-BeenThere: python-announce-list@python.org X-Mailman-Version: 2.1.24 Precedence: list List-Id: Announcement-only list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Mailman-Original-Message-ID: Xref: csiph.com comp.lang.python.announce:2634 --Apple-Mail=_5FEA03F1-F86E-485E-BFD6-79158863817B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I=E2=80=99m happy to announce the availability of a new mailing list, = with the mission of providing security announcements to the Python = community from the Python Security Response Team (PSRT): security-announce@python.org You can sign up in the usual Mailman way: https://mail.python.org/mailman/listinfo/security-announce This joins our suite of security related forums. As always, if you = believe you=E2=80=99ve found a security issue in Python, you should = contact the PSRT directly and securely via: security@python.org For more information on how you can contact us, see: https://www.python.org/news/security/ We also have a public security-focused discussion mailing list that you = can subscribe and contribute to. security-sig@python.org https://mail.python.org/mailman/listinfo/security-sig Please don=E2=80=99t report security vulnerabilities here, since this is = a publicly archived mailing list. We welcome you to collaborate here to = help make Python and its ecosystem even more secure than it already is. Once a security vulnerability is identified and fixed, it becomes public = knowledge. Generally, these are captured in a ReadTheDocs site for = posterity: https://python-security.readthedocs.io/ This new security-announce mailing list fills a void =E2=80=94 one-way = communication about security related matters from the PSRT back to the = community. This is an area that we=E2=80=99ve not done a great job at, = frankly, and this new announcement list is intended to improve that = situation. The PSRT will use this low traffic, high value forum as the = primary way the PSRT will communicate security issues of high importance = back to the wider Python community. All follow-ups to postings to this = list are redirected to the security-sig mailing list. Cheers, -Barry (on behalf of the PSRT) --Apple-Mail=_5FEA03F1-F86E-485E-BFD6-79158863817B Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhBcVftvnPZ6sHlObEm61Y6dLBr8FAlnD2zAACgkQEm61Y6dL Br81chAAuCftYPLTU99S/2ECxbtFnVan2No0zXErhtKQRBKmKIBH+GWe0Gqw7531 juSqBJDUkyooXiZAziFiG/uAGjV/wEbhfJ+qCEFq/QgWTJHvKjyk4/DdF+y1Ajy1 b1MyLCTYcD5MbzgWqg/+318fTT5vKJF5qulIUcDp1ygFR1AqvOyYjbm2B4SZbDIk 5AKsPex1/tOsCSnug6WkzxGU0YrIm8WKYxW3mG70S7yGuTIpmEpkDzKckKUgeg/O UtqmoTh82X8JNObhA1cAUI5PkVnLv2TXsq1HmEkz2rLRlR8EU/6ZutGcQT0nibPI pZ9SOMnqu4rYe9O3et2i7LuxerHPtZrNu5K2miqhI0xSQC/WCVGNiitx9sflytjw +LuZcxO86LmI/wbhVmWPXeE/eWnYj6V5+ZKVUti/GLjL/dSHdtS8t0EzmOg84zfd ilVHuOj/VsM7ujjqpMt8vqyvP+9HcyiComRioM9WLnFLsU9kJ8mBR04FOJtNI60D vArBRrXIBRez+uYJIkLXFcmY5hJ11Sj69xPC14IxQV8N7rMabjYSE9u+UNIXJKsZ 9Yic36HmeaH9XYMztbCCOGJo8odhj8aK1gty1XC5E0okMUTeHh7/m0B6rHJR6san BhxRZvusGJu/bo1mBFgWTjPONTlDAy7GLXdkb++9XDcXYBz3vsk= =KFb3 -----END PGP SIGNATURE----- --Apple-Mail=_5FEA03F1-F86E-485E-BFD6-79158863817B--