[java-sig-commits] [Bug 1321791] CVE-2016-3674 XStream: enabled processing of external entities [fedora-all]