[java-sig-commits] [Bug 1321792] CVE-2016-3674 jenkins-xstream: XStream: enabled processing of external entities [fedora-all]