[java-sig-commits] [Bug 1997778] New: CVE-2021-39146 xstream: vulnerable to an arbitrary code execution attack [fedora-all]