I didn't find a security announcement mailing list for Java (from Oracle). How to get notified about new Java patches? I am not interested in other Oracle products.
For example Apple provides such a list with signed mails: https://lists.apple.com/mailman/listinfo/security-announce (Security-announce -- Product security notifications and announcements from Apple)