> In that case: news.typo3.org is where they're published these days. An okay place to put them for archive reasons but not very useful generally. Security bulletins should have a feature that allows automatic notification. Why not post copies to a general list like typo3.english so it gets sent out by email. Matthew