Do you have a service for which I can register an email address which will send out emails when new security updates are released? My client isn’t interested in paying for every update that is released, but is interested in making sure there are no serious threats on their site.
Your best bet is to watch for changes to the OJS download page; we post security issues there. We have been discussing a security mailing list but haven’t launched anything yet.
Public Knowledge Project Team