diff --git a/static/releases.html b/static/releases.html
index d7cf3366..b5f6d228 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -665,6 +665,7 @@
- Dialer: disable false gesture detection for answering calls until the faulty implementation in the AOSP Dialer app is replaced
- Messaging: work around upstream null pointer exception bug
+ - libvpx: apply patch for CVE-2023-5217 to the standalone AOSP libvpx library, which was already fixed in the 117.0.5938.140.0 release of Vanadium
- Pixel 4, Pixel 4 XL: add upstream sensor-related app compatibility fix from the September release already included for other devices
- kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold): add upstream build reproducibility fix
- GmsCompatConfig: update to version 75