21

Today a friend alerted me about a critical security update for Magento - SUPEE-5344. I didn't see any articles about this patch on major IT websites. Even if I google for this update, I see SE pages about this update, but no Magentocommerce information, except then the download page. The Magento commerce forums are read only.

This makes me wonder - where can I find alerts, where can I subscribe to a mailing list?

10

Magento has very recently launched the Security Alert Registry—a mailing list that receives updates every time there's a potential security vulnerability or Magento patch.

Sign up here: http://magento.com/security

  • 1
    "Your security is our primary concern." Seriously? Primary??? Why did it take that long? Well... better late than never! – SPRBRN Jul 8 '15 at 7:24
11

Unfortunately there was no public blog post or news (at least that I know about).

So the best ressource is definitely getting on the Magento Partner mailing list, where this was first announced. I don't know if you can subscribe to it without being a partner.

But besides that it was also tweeted on the official Magento Twitter account: https://twitter.com/magento

In my opinion that's not the best way to communicate things like these, but at least another ressource to get relevant updates.

  • 2
    Their tweet about this: New CE/EE patch to address a potential remote code execution issue. Download from Support Portal or CE download page (bit.ly/PNgTJI) I'm not much of a twitter follower, and stuff like this will be lost in too much noise. Still a good tip! – SPRBRN Feb 20 '15 at 13:31
  • I've changed the approved answer as there is now a "Magento Security Alert Registry"... magento.com/security – SPRBRN Jul 8 '15 at 7:25
4

the official twitter account doesn't always alert about patches, take SUPEE-5944 for example. their is also no options on the magento site to subscribe for this kind of notifications. I've set up an alert on google.com/alerts ("magento patch supee-"), it eliminates a lot of background noise

3

Use http://twitter.com/magento as the official communication channel and also http://twitter.com/benmarks/. There you will be able to find the latest news and security updates for Magento.

1

You can get email alerts about any new content in The Magento CE Downloads site by using a web page change notifier, there are a few options, these are my favorite.

  1. Versionista.com offers versioning for free, works quite well with the magento page.
  2. If you use Chrome and are okay with notifications only while on your computer, PageMonitor is excellent and powerful extension that allows you to check only specific parts of the page or keywords. Such as checking only parts in ".release-download" (without quotes) every 29 minutes.

I'm using both methods.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.