Bug#989259: CVE-2021-28170

[Emmanuel Bourg]

Le 2021-05-30 18:03, Moritz Muehlenhoff a écrit :

> This was assigned CVE-2021-28170:
> https://github.com/eclipse-ee4j/el-ri/issues/155
> https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el/

Thank you for the info. The jakarta-el-api package isn't affected by 
this vulnerability,
it's related to the EL reference implementation which isn't built. The 
package provides
only the API.

Emmanuel Bourg