Hybris Security Advisories, Alerts or Bulletins

Is there any central point where we can inform us about security related patches in Hybris?

We just encountered a nasty security bug in a project, just to find out it was already known and fixed by hybris. When I looked at the related items in the Hybris JIRA, there was no hint of the security implications, neither in the title nor elsewhere.

• Is there something like a security advisory system? Like a webpage, a newsletter, etc

• Where can I find it?

• Who has access? How can I get access?