This release of vulnerability information in IOS and IOS-XE is very informative but neither you nor "Cisco Event Response"nor IOS software checker nor any other tool provide information on when new IOS/IOS-XE images will be released to actually remediate these issues. What is the point of telling the world your software is vulnerable without providing updated software images?