Until now I have always used the SecurityFocus mailing lists to keep myself informed about the possible need of upgrading my server packages. The main problems I have with using this method:
- Massive amount of items every day. I simple don't have the time to read every one of them
- A lot of uninteresting / irrelevant items.
- It's easy to overlook the interesting items between the plethora of other items
In the ideal situation, I'd get information about only the packages I am interested in (in most cases, the packages that I have installed on my servers)
The information related to this packages would include a short description of the update and possibly a changelog (too often, I upgrade my server packages without even looking at the actual changes)
Am I overlooking a major source, tool or system that could help me staying up to date?