I believe that news about the Project are more important than security advisories because the end-user just don't care about the DSA-1278man-db vulnerability. He just wants to know the lastest news about the project, what is the project and how can he download it.