[java-sig-commits] [Bug 1222927] New: CVE-2015-2156 netty: HttpOnly cookie bypass [fedora-all]