Originally posted by: Colby
OS/Distribution security mailing lists:
Windows NT/2000/XP
http://www.ntbugtraq.com/default.asp?pid=31&sid=1#020
NTBugtraq is an off-site list for security/vulnerability announcement.
Archives are available online.
MacOS
http://lists.apple.com/mailman/listinfo ... y-announce
security-announce is a security notification and annoucement list.
Archives for this list are available online.
Solaris
http://www.sun.com/software/security/resources.html
esp:
http://supportforum.sun.com/salerts/
Several forums available for Solaris security discussion and announcements.
Archives and discussion are available online.
HP-UX
http://www.hp.com/security/support/notification.html
HP Security Bulletins is a patch/vulnerability fix announcement list.
Archives are available online.
Tru64
http://www.support.compaq.com/patches/m ... list.shtml
The Tru64 mailing list is for patches and updates, including security-related updates.
SCO
http://www.caldera.com/support/forums/
The Caldera Systems Announcement List includes security advisories among press releases and other Caldera announcements.
OpenBSD:
http://www.openbsd.org/mail.html
security-announce is an advisory list for security issues and patches.
Archives for the OpenBSD lists are available online at several locations.
FreeBSD:
http://KILLMEPLEASE.org/doc/en_US.ISO885 ... URCES-MAIL
freebsd-security is a list for discussion of security issues, freebsd-security-notifications is a patch/vunlerability fix announcement list.
Archives for the lists are available online.
NetBSD:
http://www.netbsd.org/MailingLists/
tech-security is a discussion list, netbsd-announce is an announcement list that includes patch/vulnerability fix announcements.
Archives for the lists are available online.
Debian
http://www.debian.org/MailingLists/
debian-security is a discussion list, while debian-security-announce is a patch/vulnerability fix announcement list.
Archives for all of the debian lists are available online.
RedHat
https://listman.redhat.com/
redhat-watch is a patch/vulnerability fix announcement list.
Archives are available online.
Mandrake
http://www.mandrakesecure.net/en/mlist.php
exploits is a pre-patch vulnerability announcement list, announce (or security-announce) is a patch/vulnerability fix announcement list, and discuss is a discussion list.
Archives for all of these lists are available online.
LinuxPPC
http://lists.linuxppc.org/
linuxppc-security-announce is a vulnerability announcement list including both pre-patch announcements and patch/fix announcements.
Archives for this list are available online.
General Security information sites:
SecurityFocus
http://www.securityfocus.com
CERT Coordination Center
http://www.cert.org
OS/Distribution security information sites:
Windows NT/2000/XP
http://www.microsoft.com/ntserver/techr ... s/security
http://www.microsoft.com/WindowsXP/security/
http://windowsupdate.microsoft.com
http://www.ntbugtraq.com
MacOS
http://www.apple.com/support/security/
Solaris
http://www.sun.com/security/
HP-UX
http://www.hp.com/security/index-hpux.html
Tru64
http://www.tru64unix.compaq.com/unix/se ... ernet.html
AIX
http://www-1.ibm.com/servers/aix/overview/security.html
SCO
http://stage.caldera.com/support/security/
OpenBSD
http://www.openbsd.org/security.html
FreeBSD
http://KILLMEPLEASE.org/security/security.html
NetBSD
http://www.netbsd.org/Security/
Debian
http://www.debian.org/security/
RedHat
http://www.redhat.com/solutions/security/
Mandrake
http://www.linux-mandrake.com/en/security/