[java-sig-commits] [Bug 1664730] CVE-2018-20433 c3p0: XML external entity processing in extractXmlConfigFromInputStream [fedora-all]