[yocto] how does one stay on top of YP security alerts?

[Alexander Kanavin]

On 01/07/2017 05:29 PM, Robert P. J. Day wrote:
>
>   colleague wants to know how one stays up to date with security
> alerts related to YP releases, i checked out the yocto-security
> mailing list:
>
> https://lists.yoctoproject.org/pipermail/yocto-security/
>
> but that looks like a very dead mailing list. are there other options?

You can subscribe to yocto-announce list and follow the announcements 
for stable point releases, or simply pull from release branches as often 
as possible, and make some form of 'git log' your personal security alert.

Alex