This release fixes the glossary lookups so they no longer hand custom result-altering code the wrong value (a change worth checking if you have such customisations), no longer let shared caches serve glossary responses meant for logged-in visitors, and no longer return terms from vocabularies you haven't selected for the glossary.
In addition to the news page and sub-tabs, all security announcements are posted to an email list. To subscribe to email: log in, go to your user profile page and subscribe to the security newsletter on the Edit » My newsletters tab.