[java-sig-commits] [Bug 1666486] CVE-2018-19361 jackson-databind: improper polymorphic deserialization in openjpa class [fedora-all]