24

Today a friend alerted me about a critical security update for Magento - SUPEE-5344. I didn't see any articles about this patch on major IT websites. Even if I google for this update, I see SE pages about this update, but no Magentocommerce information, except then the download page. The Magento commerce forums are read only.

This makes me wonder - where can I find alerts, where can I subscribe to a mailing list?

Improve this question
1

6 Answers 6

Reset to default
12

Magento has very recently launched the Security Alert Registry—a mailing list that receives updates every time there's a potential security vulnerability or Magento patch.

Sign up here: http://magento.com/security

Improve this answer
2
  • 1
    "Your security is our primary concern." Seriously? Primary??? Why did it take that long? Well... better late than never!
    – SPRBRN
    Jul 8, 2015 at 7:24
  • The link changed in 2022, see my answer below
    – Hannes Schneidermayer
    Nov 17, 2022 at 8:05
11

Unfortunately there was no public blog post or news (at least that I know about).

So the best ressource is definitely getting on the Magento Partner mailing list, where this was first announced. I don't know if you can subscribe to it without being a partner.

But besides that it was also tweeted on the official Magento Twitter account: https://twitter.com/magento

In my opinion that's not the best way to communicate things like these, but at least another ressource to get relevant updates.

Improve this answer
2
  • 2
    Their tweet about this: New CE/EE patch to address a potential remote code execution issue. Download from Support Portal or CE download page (bit.ly/PNgTJI) I'm not much of a twitter follower, and stuff like this will be lost in too much noise. Still a good tip!
    – SPRBRN
    Feb 20, 2015 at 13:31
  • I've changed the approved answer as there is now a "Magento Security Alert Registry"... magento.com/security
    – SPRBRN
    Jul 8, 2015 at 7:25
4

the official twitter account doesn't always alert about patches, take SUPEE-5944 for example. their is also no options on the magento site to subscribe for this kind of notifications. I've set up an alert on google.com/alerts ("magento patch supee-"), it eliminates a lot of background noise

Improve this answer
3

Use http://twitter.com/magento as the official communication channel and also http://twitter.com/benmarks/. There you will be able to find the latest news and security updates for Magento.

Improve this answer
1

You can get email alerts about any new content in The Magento CE Downloads site by using a web page change notifier, there are a few options, these are my favorite.

  1. Versionista.com offers versioning for free, works quite well with the magento page.
  2. If you use Chrome and are okay with notifications only while on your computer, PageMonitor is excellent and powerful extension that allows you to check only specific parts of the page or keywords. Such as checking only parts in ".release-download" (without quotes) every 29 minutes.

I'm using both methods.

Improve this answer
0

Update 2022

The link to the Adobe Security Notifications Registration changed: https://www.adobe.com/subscription/adbeSecurityNotifications.html

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.