Security advisories are issued by CERT (The Computer Emergency Response Team).
Discussion of Unix-related security issues go on in the comp.security.unix newsgroup.