We're past freeze to the upgrade will have to wait until 2.4 releases. Does this fix any outstanding CVEs that we should be cherry-picking?

Ross