They don't seem to be security fixes, but bug fixes. If they are security fixes, they list them differently than they have previously.

None of the changes are marked SECURITY at least. https://nginx.org/en/CHANGES