The openwall oss-security list usually covers a decent number of issues and this CVE was mentioned there yesterday:

https://www.openwall.com/lists/oss-security/