[java-sig-commits] [Bug 1664731] CVE-2018-20433 c3p0: XML external entity processing in extractXmlConfigFromInputStream [epel-7]