I don't know what Linux does, but Mozilla puts out security advisories for every release.

https://www.mozilla.org/en-US/security/advisories/