[java-sig-commits] [Bug 1378613] CVE-2016-7050 RESTEasy: SerializableProvider enabled by default and deserializes untrusted data