Security advisory emails

RouterOS General
1

It’s been over a year since the WWW server vulnerability was fixed and I only now received an email about it.

The recent SMB bug now also has a working exploit. Where is the email notification about this? I hope it doesn’t come only after a worm has already infected all the vulnerable devices…

I think ANY security issue, regardless of whether it’s exploitable from WAN or LAN, should be sent out as an advisory email to anyone who is subscribed.

2

I’ve still yet to receive an email about the winbox zero-day exploit that affected < 6.42.1, I would argue a zero day deserves an email more than an exploit that was patched over a year ago!