When it comes to all Linux distributions based on Debian (which is a good chunk of them), the Debian Security Advisory mailing list notifies you of all critical security updates and vulnerabilities. Even if you don’t use Linux, it’s still useful to see what was patched in relation to what CVE.