# Is there a security mailing list? **URL:** \ **Category:** Elasticsearch\ **Created:** [February 11, 2015, 10:40pm UTC](https://discuss.elastic.co/t/is-there-a-security-mailing-list/22119 "2015-02-11T22:40:40Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![jerrac](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jerrac/32/52980_2.png) [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Post date:** [February 11, 2015, 10:40pm UTC](https://discuss.elastic.co/t/is-there-a-security-mailing-list/22119/1 "2015-02-11T22:40:40Z")
Is there a security announcement list for ELK somewhere? Something like what Ubuntu sends out when they patch security vulnerabilities. I don't see one listed on [http://www.elasticsearch.org/community/](http://www.elasticsearch.org/community/) The list would have sent out emails about the issues listed on [http://www.elasticsearch.org/community/security/](http://www.elasticsearch.org/community/security/) Hmm... Looking at the security page, I think I remember getting emailed about the latest cve. But I don't remember where the email came from... -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [February 12, 2015, 2:01am UTC](https://discuss.elastic.co/t/is-there-a-security-mailing-list/22119/2 "2015-02-12T02:01:37Z")
We do not have a security list. We do notify our direct customers as well as blogging on our site and tweeting and we also register an CVE, which goes out via those usual channels. Moving forward we'll also post to the lists, apologies for not doing so for this latest CVE. On 12 February 2015 at 09:40, David Reagan [jerrac@gmail.com](mailto:jerrac@gmail.com) wrote: > Is there a security announcement list for ELK somewhere? > > Something like what Ubuntu sends out when they patch security > vulnerabilities. > > I don't see one listed on [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/community/) > > The list would have sent out emails about the issues listed on > [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/community/security/) > > Hmm... Looking at the security page, I think I remember getting emailed > about the latest cve. But I don't remember where the email came from... > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9-8mdo2N4QeO9u3o0NxF\_gehK9MTVXB9\_LZwfUydoYMg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9-8mdo2N4QeO9u3o0NxF_gehK9MTVXB9_LZwfUydoYMg%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![jerrac](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jerrac/32/52980_2.png) [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Post date:** [March 3, 2015, 8:03pm UTC](https://discuss.elastic.co/t/is-there-a-security-mailing-list/22119/3 "2015-03-03T20:03:31Z")
Hmmm... Heh, you can tell how often I check this list... Could you create a elasticsearch-security list that is only for security announcements? I do have your blog in my rss reader, but I haven' been keeping up on my rss feeds lately. On Wednesday, February 11, 2015 at 6:02:05 PM UTC-8, Mark Walkom wrote: > We do not have a security list. We do notify our direct customers as well > as blogging on our site and tweeting and we also register an CVE, which > goes out via those usual channels. > > Moving forward we'll also post to the lists, apologies for not doing so > for this latest CVE. > > On 12 February 2015 at 09:40, David Reagan \<[jer...@gmail.com](mailto:jer...@gmail.com) \ > > > wrote: > > > Is there a security announcement list for ELK somewhere? > > > > Something like what Ubuntu sends out when they patch security > > vulnerabilities. > > > > I don't see one listed on [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/community/) > > > > The list would have sent out emails about the issues listed on > > [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/community/security/) > > > > Hmm... Looking at the security page, I think I remember getting emailed > > about the latest cve. But I don't remember where the email came from... > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 4, 2015, 6:16am UTC](https://discuss.elastic.co/t/is-there-a-security-mailing-list/22119/4 "2015-03-04T06:16:29Z")
We have been discussing this and should hopefully have an outcome on this in the near future. On 4 March 2015 at 07:03, David Reagan [jerrac@gmail.com](mailto:jerrac@gmail.com) wrote: > Hmmm... Heh, you can tell how often I check this list... > > Could you create a elasticsearch-security list that is only for security > announcements? > > I do have your blog in my rss reader, but I haven' been keeping up on my > rss feeds lately. > > On Wednesday, February 11, 2015 at 6:02:05 PM UTC-8, Mark Walkom wrote: > > > We do not have a security list. We do notify our direct customers as well > > as blogging on our site and tweeting and we also register an CVE, which > > goes out via those usual channels. > > > > Moving forward we'll also post to the lists, apologies for not doing so > > for this latest CVE. > > > > On 12 February 2015 at 09:40, David Reagan [jer...@gmail.com](mailto:jer...@gmail.com) wrote: > > > > > Is there a security announcement list for ELK somewhere? > > > > > > Something like what Ubuntu sends out when they patch security > > > vulnerabilities. > > > > > > I don't see one listed on [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/community/) > > > > > > The list would have sent out emails about the issues listed on > > > [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/community/security/) > > > > > > Hmm... Looking at the security page, I think I remember getting emailed > > > about the latest cve. But I don't remember where the email came from... > > > > > > -- > > > You received this message because you are subscribed to the Google > > > Groups "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f% > > > [40googlegroups.com](http://40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-iXAGhWdWoMbq-wYKC3ormgToC6n4hFp-mBEhZ-4J6Ww%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-iXAGhWdWoMbq-wYKC3ormgToC6n4hFp-mBEhZ-4J6Ww%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Roderik\_de\_Langen](https://avatars.discourse-cdn.com/v4/letter/r/71e660/32.png) [@Roderik\_de\_Langen](https://discuss.elastic.co/u/Roderik_de_Langen)\ **Post date:** [March 16, 2015, 7:57pm UTC](https://discuss.elastic.co/t/is-there-a-security-mailing-list/22119/5 "2015-03-16T19:57:44Z")
I would love a separate security mailing as well! On Wednesday, 4 March 2015 07:16:57 UTC+1, Mark Walkom wrote: > We have been discussing this and should hopefully have an outcome on this > in the near future. > > On 4 March 2015 at 07:03, David Reagan \<[jer...@gmail.com](mailto:jer...@gmail.com) \\> > wrote: > > > Hmmm... Heh, you can tell how often I check this list... > > > > Could you create a elasticsearch-security list that is only for security > > announcements? > > > > I do have your blog in my rss reader, but I haven' been keeping up on my > > rss feeds lately. > > > > On Wednesday, February 11, 2015 at 6:02:05 PM UTC-8, Mark Walkom wrote: > > > > > We do not have a security list. We do notify our direct customers as > > > well as blogging on our site and tweeting and we also register an CVE, > > > which goes out via those usual channels. > > > > > > Moving forward we'll also post to the lists, apologies for not doing so > > > for this latest CVE. > > > > > > On 12 February 2015 at 09:40, David Reagan [jer...@gmail.com](mailto:jer...@gmail.com) wrote: > > > > > > > Is there a security announcement list for ELK somewhere? > > > > > > > > Something like what Ubuntu sends out when they patch security > > > > vulnerabilities. > > > > > > > > I don't see one listed on [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/community/) > > > > > > > > The list would have sent out emails about the issues listed on > > > > [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/community/security/) > > > > > > > > Hmm... Looking at the security page, I think I remember getting emailed > > > > about the latest cve. But I don't remember where the email came from... > > > > > > > > -- > > > > You received this message because you are subscribed to the Google > > > > Groups "elasticsearch" group. > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f% > > > > [40googlegroups.com](http://40googlegroups.com) > > > > [https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/94134d54-b9bb-4676-80f0-7ea808098e8f%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > . > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > -- > > > You received this message because you are subscribed to the Google Groups > > > "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send an > > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > > To view this discussion on the web visit > > > [https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/419c6836-6c9c-4c40-9635-0c7fbc041cf9%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/33e7b4cf-700d-41b8-adb1-97bc93906a78%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/33e7b4cf-700d-41b8-adb1-97bc93906a78%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 12:26am UTC](https://discuss.elastic.co/t/is-there-a-security-mailing-list/22119/6 "2017-07-06T00:26:25Z")