retitle 864405 undertow: CVE-2016-2666 CVE-2016-2670 thx Moritz Muehlenhoff wrote: > > There's no other reference that what Red Hat published here: > https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2666 Also: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2670 Cheers, Moritz