https://bugzilla.redhat.com/show_bug.cgi?id=1501529
--- Comment #14 from Stefan Cornelius scorneli@redhat.com --- Patch removing RunExecutableListener: https://github.com/apache/lucene-solr/commit/7b313bb597a6d1f78773dc9c00f484c...
Patch disallowing XXE: https://github.com/apache/lucene-solr/commit/926cc4d65b6d2cc40ff07f76d50dded...