Is Release Automation affected by CVE-2017-5664: Apache Tomcat Security Constraint Bypass?