This mailing list is correct, CVEs are sent to the users list and also should be sent to the dev list.
On Wed, Feb 8, 2023 at 11:12 AM Jonathan Card < [email protected]> wrote: > Is there a mailing list to subscribe to potential CVE notices? It looks > like I can’t/shouldn’t subscribe to security@…, because that’s for > reporting vulnerabilities, and it’s not clear if there is a mailing list > that would be exclusively for security updates, and where they would be > announced. > > Thank you. > > Jonathan Card > Software Engineer, Intersystems > [email protected]<mailto:[email protected]> > > > > >
