Vulnerability fixes and CVE records