You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Wei-Chiu Chuang (JIRA)" <ji...@apache.org> on 2016/01/14 20:08:39 UTC

[jira] [Created] (HADOOP-12710) Remove dependency on commons-httpclient for TestHttpServerLogs

Wei-Chiu Chuang created HADOOP-12710:
----------------------------------------

             Summary: Remove dependency on commons-httpclient for TestHttpServerLogs
                 Key: HADOOP-12710
                 URL: https://issues.apache.org/jira/browse/HADOOP-12710
             Project: Hadoop Common
          Issue Type: Improvement
    Affects Versions: 3.0.0
            Reporter: Wei-Chiu Chuang
            Assignee: Wei-Chiu Chuang


Commons-httpclient has long been EOL. Critically, it has several security vulnerabilities: CVE-2012-5783 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5783.

I saw a recent commit that depends on commons-httpclient for TestHttpServerLogs (HADOOP-12625) This JIRA intends to replace the dependency with httpclient APIs.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)