CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • General Discussion (please no support requests here!) (Moderator: Michał Mach) »
  • how to get information about security updates
Pages: [1]

Author Topic: how to get information about security updates  (Read 14967 times)

zmi

  • I’m new here
  • *
  • Posts: 16
  • Karma: 0
    • Protéger Internet Services Austria
  • CiviCRM version: 4.0.0
  • CMS version: Joomla 1.6.3
  • MySQL version: 5.1
  • PHP version: 5.3.3
how to get information about security updates
November 23, 2012, 06:35:33 am
I see that you have twitter, an announcement board, etc. to provide information about CiviCRM. But I could not find out if there's such a thing for security updates? We are an ISP, and we can't follow all the forums for all software, so we really need to subscribe to a mailing list where information about security implications is provided, so we can tell that to our customers or fix it for them if they want (=pay for it). Can someone help me here?
--
Protéger: Professional Hosting in AUSTRIA, Europe
http://proteger.at/
http://facebook.com/protegerat

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: how to get information about security updates
November 23, 2012, 08:37:00 am

Sorry, we do announcement via our blog and forum mailing list only. All folks with an account on the forum get that email (unlss they've opted out)

We are in the process of migrating the forum mailing list to a civimail mailing list, but its more on a long term basis. Once we do that, we'll consider doing a security mailing list

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

Michael McAndrew

  • Forum Godess / God
  • I live on this forum
  • *****
  • Posts: 1274
  • Karma: 55
    • Third Sector Design
  • CiviCRM version: various
  • CMS version: Nearly always Drupal
  • MySQL version: 5.5
  • PHP version: 5.3
Re: how to get information about security updates
November 26, 2012, 04:07:17 am
Hey there,

Agree this is important and will try and get it set up in the new as as per lobo's suggestion - if you have energy to help with that (sounds like it is in your interest) please ping me.

Michael
Service providers: Grow your business, build your reputation and support CiviCRM. Become a partner today

zmi

  • I’m new here
  • *
  • Posts: 16
  • Karma: 0
    • Protéger Internet Services Austria
  • CiviCRM version: 4.0.0
  • CMS version: Joomla 1.6.3
  • MySQL version: 5.1
  • PHP version: 5.3.3
Re: how to get information about security updates
November 26, 2012, 07:28:51 am
Quote from: Michael McAndrew on November 26, 2012, 04:07:17 am
Agree this is important and will try and get it set up in the new as as per lobo's suggestion - if you have energy to help with that (sounds like it is in your interest) please ping me.

We are an ISP, I could offer a mailing list running on our hosts if you want. We use mailman for that. Is that helpful?
--
Protéger: Professional Hosting in AUSTRIA, Europe
http://proteger.at/
http://facebook.com/protegerat

Michael McAndrew

  • Forum Godess / God
  • I live on this forum
  • *****
  • Posts: 1274
  • Karma: 55
    • Third Sector Design
  • CiviCRM version: various
  • CMS version: Nearly always Drupal
  • MySQL version: 5.5
  • PHP version: 5.3
Re: how to get information about security updates
November 27, 2012, 03:01:28 am
Thanks a lot for the offer :)

We have the infrastructure to send out the maiiings.  What we are missing is the proceedure and a person to implement the proceedure.  Are you interested in helping out with that?
Service providers: Grow your business, build your reputation and support CiviCRM. Become a partner today

zmi

  • I’m new here
  • *
  • Posts: 16
  • Karma: 0
    • Protéger Internet Services Austria
  • CiviCRM version: 4.0.0
  • CMS version: Joomla 1.6.3
  • MySQL version: 5.1
  • PHP version: 5.3.3
Re: how to get information about security updates
November 27, 2012, 03:28:16 am
That would involve learning to understand your internals, so it would take me a lot of time "just" to have a mail about security updates. That's a little too much work for me, sorry.

But it shouldn't be a lot of work for you, right? You already have the announcements via blog & forum, so it's just a matter of sending it via e-mail too. It "just" has to be filtered so no feature announcements are sent, only security stuff. Don't know if you have that already? Maybe this is what you meant. The typo3 project has a nice security info ecosystem, maybe they can help or give ideas about the missing things?
--
Protéger: Professional Hosting in AUSTRIA, Europe
http://proteger.at/
http://facebook.com/protegerat

Michael McAndrew

  • Forum Godess / God
  • I live on this forum
  • *****
  • Posts: 1274
  • Karma: 55
    • Third Sector Design
  • CiviCRM version: various
  • CMS version: Nearly always Drupal
  • MySQL version: 5.5
  • PHP version: 5.3
Re: how to get information about security updates
November 30, 2012, 07:44:02 am
Agree that it shoudn't be too hard for us.  I'll get started on it in the new year :)
Service providers: Grow your business, build your reputation and support CiviCRM. Become a partner today

Coleman Watts

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 2346
  • Karma: 183
  • CiviCRM version: The Bleeding Edge
  • CMS version: Various
Re: how to get information about security updates
November 30, 2012, 01:27:47 pm
One more thought - currently we do an automatic check and alert the admin if a new release is available, but it does not distinguish between normal and security releases. Can we think about how to do that?
Try asking your question on the new CiviCRM help site.

zmi

  • I’m new here
  • *
  • Posts: 16
  • Karma: 0
    • Protéger Internet Services Austria
  • CiviCRM version: 4.0.0
  • CMS version: Joomla 1.6.3
  • MySQL version: 5.1
  • PHP version: 5.3.3
Re: how to get information about security updates
January 18, 2013, 05:09:17 am
For the beginning, receiving notification mail on all updates is better than nothing. But it would be nice if I could limit that to security updates only.
--
Protéger: Professional Hosting in AUSTRIA, Europe
http://proteger.at/
http://facebook.com/protegerat

Chris Burgess

  • Ask me questions
  • ****
  • Posts: 675
  • Karma: 59
Re: how to get information about security updates
February 18, 2014, 06:23:41 pm
Well, now you can :)

CiviCRM security updates group is @ https://civicrm.org/advisory/subscribe - add your email there.
@xurizaemon ● www.fuzion.co.nz

jimcorbett

  • I’m new here
  • *
  • Posts: 2
  • Karma: 0
  • CiviCRM version: 4.4.5
  • CMS version: Joomla
  • MySQL version: SQL Server 2014
  • PHP version: 5.5
Re: how to get information about security updates
June 25, 2014, 07:54:51 pm
You can easily update from a weekly updates of CiviCRM. no need to do that on a daily basis.
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • General Discussion (please no support requests here!) (Moderator: Michał Mach) »
  • how to get information about security updates

This forum was archived on 2017-11-26.