Collect drupal

[pombredanne]

See https://www.drupal.org/sa-core-2019-007 for example
https://www.drupal.org/security

[armijnhemel]

https://www.drupal.org/security

There are apparently advisories for Drupal core, contributed projects as well as "public service announcements" (example: EOLing versions).