Describe the issue or problem
I am trying to find reliable fast way to see if there is securrity update for OJS and plugins.
Steps I took leading up to the issue
-
I talked to chat gpt. It gave me few links but those feel unreliable or too much inrelevant information. E.g. https://pkp.sfu.ca/software/ojs/download/ - ok here there are information but its too much - it adds features, depreacations, etc. Plus in a format which proably is not reliably scraped so I could just filter out from the many information.
-
cve.org - https://www.cve.org/CVERecord/SearchResults?query=open+journal+systems
https://www.cve.org/CVERecord/SearchResults?query=ojs - those give different results. Feels unreliable. Same with https://nvd.nist.gov/vuln/search#/nvd/home?keyword=ojs&resultType=records
https://nvd.nist.gov/vuln/search#/nvd/home?keyword=open%20journal%20systems&resultType=records
-
Another I did not try but chatgpt suggested “Dashboard → version / update notifications” - but I am thinking - if site is hacked, this might show unreliable results also, no?
-
OJS blog - again too much unneeded information will be I expect.
-
Mail - I saw option to subscribe for security updates. Maybe that is most reliable. I just usually not spam in the mail. But maybe if that is most reliable and easy to filter, I could create a mail filter so it goes to some folder. And then I can easily check if there are.
What application are you using?
OJS 3.5.0.3
Additional information
Thats just the OJS. But plugins also could create lot of surface for attack. What about those - how to quickly see which ones have vulnerabilieties and need update or disable/uninstal?