Here is a typical upgrade path, adapting the approach for the known bug.
Support for AutoQoS for wireless and "AutoQoS Compact" to simplify configurations. 4. Security and Vulnerabilities cat3k-caa-universalk9.spa.03.06.10.e.152-2.e10.bin