[java-sig-commits] [Bug 1639092] New: CVE-2018-11796 tika: Incomplete fix allows for XML entity expansion resulting in denial of service [fedora-all]