Indeed, you're as close to the source here as you can be, other than the people envolved in development and testing. Why would you want to think twice about another option?
All patches, critical or not, are released by VSTEP on their site, and the forum always will have an announcement about them, if they are released aswell.
I'd say, just download them from VSTEP, if VSTEP doesn't have it, it doesn't exsist, so then you don't have to wonder about a patch if it's name isn't clear.
Regards,
Fred