Perhaps the subject line of release announcements should indicate whether that release includes a security fix?
For example: Subject: Apache Subversion 1.8.6 released [SECURITY] Subject: Apache Subversion 1.8.7 released Subject: Apache Subversion 1.8.8 released Subject: Apache Subversion 1.8.9 released Subject: Apache Subversion 1.8.10 released [SECURITY] Subject: Apache Subversion 1.8.11 released [SECURITY] Subject: Apache Subversion 1.8.12 released