The process is to address the CVE in stx master first and then cherrypick to the appropriate release branches after some soak time
The process is to address the CVE in stx master first and then cherrypick to the appropriate release branches after some soak time