Here you can read about the role of UISO bulletins compared to vendor bulletins and sign up to receive UISO bulletins by e-mail. Or you can view every UISO bulletin ever published.
Software errors are routinely discovered in operating systems and applications. The majority of these errors, commonly referred to as bugs, not only impact functionality but can also introduce serious security vulnerabilities. To address this problem, vendors of operating systems and applications release updates (often called patches) to their software to eliminate vulnerabilities. Most vendors also have subscription-based e-mail notification lists for notifying users about vulnerabilities and patches for their products.
If you maintain one or more computers or networked devices, it is your responsibility to monitor vendor security bulletins for those systems. As a convenience, our Vendor Information page includes a list of the most common vendor bulletin subscription sites. We also provide an External Advisories page that is automatically updated with up-to-the minute advisories from vendors and security organizations.
Because of our close working relationship with many of you, we occasionally forward you specific vendor security bulletins that we think might have a major impact upon your service area. However, these should not be your primary source for this information. Again, you should rely on your vendor security bulletin subscriptions to serve that purpose.
As a supplement to (not a replacement for) these vendor bulletins, we also have our own bulletins mailing list, ITSO-BULLETINS-L. This service lets us share security information with the University community regarding current high-profile security issues (vulnerable software issues, multiple system compromises, etc.) that are impacting or could impact University operations. We sign posts to this list with our bulletin PGP key.
To subscribe to this list, send an e-mail message to listserv@indiana.edu with a body of:
subscribe itso-bulletins-lThese bulletins are also available on our web site in the form of both an HTML page and an RSS feed.
Attention: We strongly recommend that Local Support Providers and central campus IT staff subscribe to this list to stay informed of noteworthy security issues at the University, and to augment direct subscriptions to vendor advisories.
