[java-sig-commits] [Bug 1524585] CVE-2016-4216 xmpcore: XXE resulting in information disclosure