LGTM - in general it would be better to separate out the retirement of unrelated CVEs from this MR as ideally we would have each logical change separte - ie. this would just update the status of the ghostscript CVEs and retire any of these CVEs that can now be retired, and a separate MR would exist to retire the historical ones.
LGTM - in general it would be better to separate out the retirement of unrelated CVEs from this MR as ideally we would have each logical change separte - ie. this would just update the status of the ghostscript CVEs and retire any of these CVEs that can now be retired, and a separate MR would exist to retire the historical ones.