[java-sig-commits] [Bug 1942556] CVE-2021-21344 xstream: arbitrary code execution via crafted input stream [fedora-all]