An announcement by itself that $random_crappy_piece_of_software proved to be even more crap than previously expected is not really a useful addition. Neither are announcements on SF that said piece of crap is supposedly now patched and slightly less so... Much more relevant are tricks and experiences that deviate from or expand the vendor recommendations, (remote) detection, work-arounds and mitigating measures you can take when upgrading/patching is not immediately possible. [This heartbleed Q&A](https://serverfault.com/q/587329/37681) is a good example of how such a Q&A can turn out.