Re the patch documentation for the CVEs: we are investigating the reported issues that have arisen out of them. We hope to have updated documentation out soon (but can't say when).