9.7.17 CVE Letter