GrapheneOS on Nostr: We don't provide a list of each CVE for fixed vulnerabilities. It's up to the ...

We don't provide a list of each CVE for fixed vulnerabilities. It's up to the upstream projects to list those and we reference the upstream updates. We only reference CVEs in specific cases where we specifically backported those patches ourselves. The list of CVEs at the bottom of each of our release notes sections is a list of the current backports from the security preview releases which were not already present in our main releases. It doesn't list ones already in regular releases.