REDHAT-BUG-1299385: Medium severity openjdk 8 vulnerability

It was discovered that the JAXP component of OpenJDK did not properly count total size of the expanded general entities and therefore did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application parse a specially crafted XML file could use this flaw to make the application use and excessive amount of memory and possibly exit on out of memory condition.

JAXP XML parsing limits are described on the following page:

https://docs.oracle.com/javase/tutorial/jaxp/limits/limits.html