Security Patch Reporting

[OttoBomb]

I'm currently using IPB, the security patch system there is awful. If a security patch is released, they make an announcement in your AdminCP, and the announcement stays up for about a month. It does not go away if you patch the software for the flaw, nor does the software itself indicate version number or patch level.

How does XF handle security patches and their reporting?

 

[whynot]

XenForo makes no callbacks/forwards at all, so nothing is ever communicated via the ACP.

You can always use the Install & Upgrade Add-on by @Jon W. IIRC it tells you when there is a new XF version in the ACP.

Just to clarify, the Install and Upgrade by Waindigo add-on does not automatically alert you if your XenForo installation is out of date, although it does have the ability to do that and if there was a serious security breach we would certainly use the broadcast system included in that add-on to alert sites that needed to upgrade their installation.

No callbacks in XF itself but the addon does it...

 

[Jake B.]

No callbacks in XF itself but the addon does it...

The add-on isn't made by xenforo. I don't see what you're getting at..