Security vulnerabilities and patches announcements in OpenJDK

Hi, I was wondering how are security vulnerabilities and patches announcements made in OpenJDK. Could somebody please guide me in this. Regards, Deepak