For non-public zero-days on packages in linux/BSD distros - https://oss-security.openwall.org/wiki/mailing-lists/distros https://oss-security.openwall.org/wiki/

For non-public zero-days on packages in linux/BSD distros - https://oss-security.openwall.org/wiki/mailing-lists/distros https://oss-security.openwall.org/wiki/mailing-lists/distros For public issues - https://oss-security.openwall.org/wiki/mailing-lists/oss-security https://oss-security.openwall.org/wiki/mailing-lists/oss-sec... For vague-posting about unconfirmed CVEs and zero days - twitter.com and/or mastodon and/or your friend on signal