According to upstream, this version is affected[1], while Glassfish or 
later isn't. Also, take into account that Debian's current version has reached 

BTW: why the severity level change?


Best regards,
Marcos Marado

This is the maintainer address of Debian's Java team
Please use for discussions and questions.

Reply via email to