RE: Security issue in commons-fileup.load version 1.4 .

["Singh, Randeep" <ra...@sap.com.INVALID>]

HI Colleagues ,

Any updates you may have would be greatly appreciated.

Best Regards
Randeep
From: Singh, Randeep
Sent: May 27, 2021 7:45 pm
To: user@commons.apache.org
Subject: Security issue in commons-fileup.load version 1.4 .

HI All,

This is regarding one of security issue that is reported in our component which is coming from commons-io (2.2) lib transitive dependency via commons-fileupload .
It seems this is fixed in commons-io (2.7) or above, Hence would it be  possible to bump version of commons-io to 2.8 or 2.9 and release a patch .
I can see that it has been already done with this commit https://github.com/apache/commons-fileupload/commit/8370f1e0a15a0469d04579e2abd5500ebf90b8c8/   may I know by when we can expect a release of 2.0 ? in case patch is not possible .


Best Regards
Randeep