Google’s monthly security release just hit AOSP code this morning, and as of this post has been merged into CM 12.1 source (Android 5.1.1._r24). Nightlies from today forwards will contain the security fixes identified on the release document.
For our stable release users, we’ll be rolling out an update to the stable CMUpdater channel with this set of fixes this week as well.
-The CyanogenMod Team
PS: Marshmallow source just released, we are syncing and will begin evaluating it. When we have more to share on this, we will publish a separate post.