Checkstyle prior to 8.18 loads external DTDs by default.
checkstyle checkstyle
debian debian linux 8.0
fedoraproject fedora 28
fedoraproject fedora 29