[java-sig-commits] [Bug 1908838] CVE-2020-26259 xstream: arbitrary file deletion on the local host when unmarshalling [fedora-all]