All vulnerabilities fixed in these patches have already been fixed in Liferay Portal 7.3 GA8 and 7.4 GA3. Please refer to the readme file for a list of issues addressed in each patch. For more information on working with patches, please see Patching Liferay Portal .
Thanks to Arun Das, binary builds of the patches are available:
Disclaimer: Binary patches have not been tested by Liferay