All, together with the patch release 3.0.1, we have also shipped openHAB 2.5.12, which addresses the same security vulnerability and which contains a few other small fixes - see Release openHAB 2.5.12 · openhab/openhab-distro · GitHub for details.
If you are on a 2.5.x release, we recommend you to update to 2.5.12.
Please use this topic for any questions and discussions - thanks!