[arch-general] No arch-security emails for 3 months

[amw]

I noticed the same thing and had the same question

On 4/2/22 17:14, Morten Linderud via arch-general wrote:
> On Sat, Apr 02, 2022 at 08:16:33PM +0200, kiasoc5--- via arch-general wrote:
>> The arch-security mailing list has not sent anything since December 2021. How
>> come? Have there been 0 security fixes in packages? Is the security team busy?
>> Something else? Just curious, thanks.
>
> Yo,
>
> There has been several CVEs registered in the tracker but no advisory work has
> been done since December. This is mostly because of security team burnout and
> the tedious work that CVE tracking entails.
>
> Getting some form of automatic CVE ignestion to the point where we don't need to
> deal with the manuel work it currently is would be great, but that requires a
> fair bit of work sadly :/
>