aboutsummaryrefslogtreecommitdiffstats
path: root/chapter11
diff options
context:
space:
mode:
authorXi Ruoyao <xry111@xry111.site>2022-09-05 10:04:33 +0800
committerXi Ruoyao <xry111@xry111.site>2022-09-05 10:04:33 +0800
commit696a7b4a834e93901dd1d0e7299eaeab87a4ead9 (patch)
treeef844e2b66bb8ac5c68f7faf4949d870794035f4 /chapter11
parentfb66c4c583c51e75d917dbaab1a3ccde2b983a5e (diff)
whatnow: update online resources list for maintainance
Bugtraq is dead since 2021, use oss-sec instead. For CERT, cert.org redirects to CMU and us-cert.gov redirects to US CISA (https://www.cisa.gov/uscert/). I'm not familiar with those so left those for a US citizen to add :).
Diffstat (limited to 'chapter11')
-rw-r--r--chapter11/whatnow.xml19
1 files changed, 7 insertions, 12 deletions
diff --git a/chapter11/whatnow.xml b/chapter11/whatnow.xml
index 9bca885f1..999926289 100644
--- a/chapter11/whatnow.xml
+++ b/chapter11/whatnow.xml
@@ -27,26 +27,21 @@
Since an LFS system is compiled from source, it is up to you to keep
abreast of such reports. There are several online resources that track
such reports, some of which are shown below:</para>
-<!-- FIXME too outdated, need a full update -->
+
<itemizedlist>
<listitem>
- <para><ulink url="http://www.cert.org/">CERT</ulink> (Computer
- Emergency Response Team)</para>
+ <para><ulink url="&lfs-root;lfs/advisories/">LFS Security Advisories</ulink></para>
- <para>CERT has a mailing list that publishes security alerts concerning
- various operating systems and applications. Subscription information is
- available at <ulink
- url="http://www.us-cert.gov/cas/signup.html"/>.</para>
+ <para>This is a list of security vulnerabilities discovered in the
+ LFS book after it's published.</para>
</listitem>
<listitem>
- <para>Bugtraq</para>
+ <para><ulink url="https://seclists.org/oss-sec/">Open Source Security Mailing List</ulink></para>
- <para>Bugtraq is a full-disclosure computer security mailing list. It
- publishes newly discovered security issues, and occasionally potential
- fixes for them. Subscription information is available at <ulink
- url="http://www.securityfocus.com/archive"/>.</para>
+ <para>This is a mailing list for discussion of security flaws,
+ concepts, and practices in the Open Source community.</para>
</listitem>
</itemizedlist>