mailing list for security advisories

[hboetes2]

Hello everyone,

I have subscribed to https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4

But IMHO that's not really ideal: XenForo sends only one email per thread until you open it again, so an unread notification silences every following advisory. A mailing list doesn’t have that limitation.

Therefore, I would like to request adding security announcement mailing lists for the various products to https://lists.proxmox.com/postorius/lists/

Thanks for taking my request into consideration.

Han

 

[fabian]

we will consider how to improve the notification behaviour, thank you for your input!

 

[Christoph Lechleitner]

I'm seconding the wish for a security mailing list.

In theory I am watching, first and foremost, https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/, but I have not received any e-mail for that forum since 2026-07-08.

As far as I understand the forum settings everything seems correct, and I can't find any mailserver logentry since 2026-08-17.

My only suspicion about a reason is that my vacation autoreply might have caused some kind of lockup?

Anyway, in general a dedicated mailing list system should provide the best achievable robustness for notifications so I'd appreciate it.

As example for a major security fix we could have learnt faster I'd like to name CVE-2026-99999 AKA PwnEscape AAK PSA-2026-00068-1 which was announced in the security forum 3 days ago in https://forum.proxmox.com/threads/p...security-advisories.149331/page-4#post-873167.
It is quite severe, AFAIK activating the fix (Thanks!) requires to reboot nodes ASAP.