[java-sig-commits] [Bug 1764660] CVE-2019-12400 xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source [epel-all]