[java-sig-commits] [Bug 1524585] New: CVE-2016-4216 xmpcore: XXE resulting in information disclosure