I am correct to understand that such CVE's are being patched to magento-lts

[f1-outsourcing]

Sorry for asking maybe the obvious, but Am I correct to understand that such CVE's are being patched to magento-lts, is there some changelog or so that mentions these?

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=magento

[fballiano]

yes, but anyway most of them are related to M2 ;-)

[f1-outsourcing]

I know, I know!!! In a discussion on reddit I even stated that I suspected that there would be more exploits in M2, because the development/management team look to me like rookies, no vision no clear strategy.