[java-sig-commits] [Bug 1524586] CVE-2016-4216 xmpcore: XXE resulting in information disclosure [fedora-all]