How to figure out which fixed releases to update to?

[Syam]

This is regarding CVE-2017-12228 and CVE-2017-12232.

There are currently multiple known fixed releases for affected versions.

How do I find out which version to update to, which does not affect the features on the current versions of example: c2900-****************.154-3.M3.bin

Need advise on this.

Regards

Syam

[Leo Laohoo]

CSCvc33171, CSCvc03809