++1

We would also like a formal way to track CVE's and which specific patch they affect and are fixed in. This would allow us to more easily demonstrate the value we get from BOSH and regular updates.

Thanks,

Theo

PM for Cloud Foundry team within a large bank