[java-sig-commits] [Bug 1321791] New: CVE-2016-3674 XStream: enabled processing of external entities [fedora-all]