Do you have access to Active IQ for your cluster? If so, the "Risks" section will include security items that ActiveIQ has detected that your cluster(s) is/are vulnerable to and include links to the security advisory documention, which generally includes remediation steps.