[java-sig-commits] [Bug 1774727] New: CVE-2019-12422 shiro: Cookie padding oracle vulnerability with default configuration [fedora-all]