Debian Linux Security Advisory 3428-1 - It was discovered that malicious web applications could use the Expression Language to bypass protections of a Security Manager as expressions were evaluated within a privileged code section.
05a92bea4eddaa1806339aa6b8cea68aa995c5eecc0131cb0b84720f02ffb2e6