As mentioned by Shaun, the fixes for both CVEs already landed in the security pocket, marking this bug as Fix Released.
As mentioned by Shaun, the fixes for both CVEs already landed in the security pocket, marking this bug as Fix Released.