Security / Annoucements List

Dear Postgresql friends,

I'm curious as to what's the best way to get good notice of security
issues and/or new version releases?

I'm subscribed to the -announce list, but since the beginning of the
year have received at least 10-20 messages through it. Most of these
messages appear to be commercial, rather than connected to either a
security issue, software release, or other major postgresql item.

I have NO complaint with the above, but am curious for folks who desire
to receive notices about security / version releases if there is a
subset security type list that might just have those announcements?

Any good free service recommendations like Secunia (not free)?

- August