Hi
I found with DuckDuckGo https://openwrt.org/contact and https://lists.openwrt.org/
Is there a security and announcment mailing list?
Current stable release always announced here:
https://openwrt.org/
Security advisories here:
https://openwrt.org/advisory/start
Not sure about a mailing list...
1 Like
thanks. How to subscribe?
On Twitter you post also stuff, but I wish to avoid Twitter.
I don't know if there is a mailing list for updates and security advisories. I usually check every week or so manually.
I checked it and there is no info
https://github.com/openwrt/openwrt/releases such as release notes etc.
I need to install every release?
What about security fixes?
For release notes see the respective release page in the OpenWrt wiki: https://openwrt.org/releases/19.07/start
Creation of an announcement mailing list has been decided some time ago, but seems not to be implemented yet: http://lists.infradead.org/pipermail/openwrt-adm/2020-June/001457.html
It would be nice to have a newsletter service.
The correct answer is that OpenWRT doesn't have any mechanism to notify end-users of new releases.
I think your best unofficial option right now is to monitor github for new tagged releases. However, tags and releases in source happen a week or three before an actual end-user release. You can use a service like this one: https://newreleases.io/github/openwrt/openwrt
Uhm... that's wrong?
That's right unless you can prove otherwise, and I'd like to be wrong here.
I define "notification" as an attempt to reach out and "notify" end-users. This would mean email or RSS feed probably qualifies. You could notify on private networks like twitter, reddit, and facebook too, but give the large number of people who don't use those, using them alone would probably not be sufficient,
The OpenWRT project doesn't make the effort to notify users. There's no security announcements and never has been.
The old message board had a specific section where new releases were posted by admins and that forum could send out email notifications, so that worked, but admins didn't use it consistently and the old forum died anyway.
Posting a notice on a website which requires the user to manually check on a regular basis is not a means of notification. That's publication, not notification.
Unless I am mistaken, OpenWRT does not do any of the following:
Send email announcements.
Post anything on Twitter.
Post anything on Facebook.
Post anything on Reddit.
Have an announcements RSS feed.
Simply subscribe to https://openwrt.org/releases/start and you will get notified if any page in the releases namespace changes or is added.
As soon as the preparation of the release notes start (this happens usually well before the official release), you will get a notification email.
2 Likes
So posting on Twitter (!), Facebook (!!) or Reddit is considered the official way to do release announcements nowadays? If so then yes, OpenWrt doesn't do any "release announcements".
6 Likes
I forgot to mention: This also works for security advisories.
Simply subscribe to https://openwrt.org/advisory/start and chose advisory:* in order to get an email when something in the advisory namespace changes.
1 Like
Hey, that's not bad! Good stuff. Thank you for sharing that.
Unfortunately, as you noted, this notification mechanism has a lot of problems. Looking at the release history for that page, half of the changes to this page were edits which were not related to an actual release. That's a lot of false positives. Additionally, like you said, the edits often don't happen exactly when new releases are available. Ultimately this feature just wasn't designed for notifying users of new releases. At least it's better than nothing. I've already set up an alert for myself for next time.
1 Like
I personally don't use twitter or facebook, but some people do. It would be nice if you had some presence on those private networks, IF you wanted to do it, but I wouldn't make any of those the primary communication channel.
The r/openwrt subreddit has seen people posting about releases, but it's happening when git releases get tagged, so several days before when no builds are available yet, which is annoying.
Cool. I was wrong about this! OpenWRT has started documenting and publishing security advisories as of a few months ago in late 2019. This is something I've wanted for a long time.