🦊

Qualys oss-security reports

Qualys writes excellent security reports and analysis. Their method and formatting is exemplary for anyone wishing to learn to write clear and concise security reports.

Here are all of Qualys’ Security advisories submitted to the oss-security mailing list, including “short write-ups” (e.g. 2022-01-10), and third-party analysis (2023-02-02) not listed on Qualys’ website.

The titles have been simplified to unify archive listing.

The email discussion and followup is worthwhile. In the future I may add mbox files (but need an archive).

Download a local copy of the txt files with:

wget -A txt -r --no-parent https://markesler.com/notes/qualys-oss-security-reports/

update 2024-11-19: I had the privilege of coordinating on behalf of Qualys for LPEs in needrestart. Their empathy and deftness were humbling.

Reports