Is there a security mailing list?

Is there a security announcement list for ELK somewhere?

Something like what Ubuntu sends out when they patch security
vulnerabilities.

I don't see one listed on http://www.elasticsearch.org/community/

The list would have sent out emails about the issues listed
on http://www.elasticsearch.org/community/security/

Hmm... Looking at the security page, I think I remember getting emailed
about the latest cve. But I don't remember where the email came from...

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

We do not have a security list. We do notify our direct customers as well
as blogging on our site and tweeting and we also register an CVE, which
goes out via those usual channels.

Moving forward we'll also post to the lists, apologies for not doing so for
this latest CVE.

On 12 February 2015 at 09:40, David Reagan jerrac@gmail.com wrote:

Is there a security announcement list for ELK somewhere?

Something like what Ubuntu sends out when they patch security
vulnerabilities.

I don't see one listed on http://www.elasticsearch.org/community/

The list would have sent out emails about the issues listed on
http://www.elasticsearch.org/community/security/

Hmm... Looking at the security page, I think I remember getting emailed
about the latest cve. But I don't remember where the email came from...

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9-8mdo2N4QeO9u3o0NxF_gehK9MTVXB9_LZwfUydoYMg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Hmmm... Heh, you can tell how often I check this list...

Could you create a elasticsearch-security list that is only for security
announcements?

I do have your blog in my rss reader, but I haven' been keeping up on my
rss feeds lately.

On Wednesday, February 11, 2015 at 6:02:05 PM UTC-8, Mark Walkom wrote:

We do not have a security list. We do notify our direct customers as well
as blogging on our site and tweeting and we also register an CVE, which
goes out via those usual channels.

Moving forward we'll also post to the lists, apologies for not doing so
for this latest CVE.

On 12 February 2015 at 09:40, David Reagan <jer...@gmail.com <javascript:>

wrote:

Is there a security announcement list for ELK somewhere?

Something like what Ubuntu sends out when they patch security
vulnerabilities.

I don't see one listed on http://www.elasticsearch.org/community/

The list would have sent out emails about the issues listed on
http://www.elasticsearch.org/community/security/

Hmm... Looking at the security page, I think I remember getting emailed
about the latest cve. But I don't remember where the email came from...

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

We have been discussing this and should hopefully have an outcome on this
in the near future.

On 4 March 2015 at 07:03, David Reagan jerrac@gmail.com wrote:

Hmmm... Heh, you can tell how often I check this list...

Could you create a elasticsearch-security list that is only for security
announcements?

I do have your blog in my rss reader, but I haven' been keeping up on my
rss feeds lately.

On Wednesday, February 11, 2015 at 6:02:05 PM UTC-8, Mark Walkom wrote:

We do not have a security list. We do notify our direct customers as well
as blogging on our site and tweeting and we also register an CVE, which
goes out via those usual channels.

Moving forward we'll also post to the lists, apologies for not doing so
for this latest CVE.

On 12 February 2015 at 09:40, David Reagan jer...@gmail.com wrote:

Is there a security announcement list for ELK somewhere?

Something like what Ubuntu sends out when they patch security
vulnerabilities.

I don't see one listed on http://www.elasticsearch.org/community/

The list would have sent out emails about the issues listed on
http://www.elasticsearch.org/community/security/

Hmm... Looking at the security page, I think I remember getting emailed
about the latest cve. But I don't remember where the email came from...

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%
40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-iXAGhWdWoMbq-wYKC3ormgToC6n4hFp-mBEhZ-4J6Ww%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

I would love a separate security mailing as well!

On Wednesday, 4 March 2015 07:16:57 UTC+1, Mark Walkom wrote:

We have been discussing this and should hopefully have an outcome on this
in the near future.

On 4 March 2015 at 07:03, David Reagan <jer...@gmail.com <javascript:>>
wrote:

Hmmm... Heh, you can tell how often I check this list...

Could you create a elasticsearch-security list that is only for security
announcements?

I do have your blog in my rss reader, but I haven' been keeping up on my
rss feeds lately.

On Wednesday, February 11, 2015 at 6:02:05 PM UTC-8, Mark Walkom wrote:

We do not have a security list. We do notify our direct customers as
well as blogging on our site and tweeting and we also register an CVE,
which goes out via those usual channels.

Moving forward we'll also post to the lists, apologies for not doing so
for this latest CVE.

On 12 February 2015 at 09:40, David Reagan jer...@gmail.com wrote:

Is there a security announcement list for ELK somewhere?

Something like what Ubuntu sends out when they patch security
vulnerabilities.

I don't see one listed on http://www.elasticsearch.org/community/

The list would have sent out emails about the issues listed on
http://www.elasticsearch.org/community/security/

Hmm... Looking at the security page, I think I remember getting emailed
about the latest cve. But I don't remember where the email came from...

--
You received this message because you are subscribed to the Google
Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%
40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/33e7b4cf-700d-41b8-adb1-97bc93906a78%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.