[jira] [Commented] (HADOOP-12711) Remove dependency on commons-httpclient for ServletUtil

["Hadoop QA (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-12711?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15112310#comment-15112310 ] 

Hadoop QA commented on HADOOP-12711:
------------------------------------

| (x) *{color:red}-1 overall{color}* |
\\
\\
|| Vote || Subsystem || Runtime || Comment ||
| {color:red}-1{color} | {color:red} patch {color} | {color:red} 0m 5s {color} | {color:red} HADOOP-12711 does not apply to trunk. Rebase required? Wrong Branch? See https://wiki.apache.org/hadoop/HowToContribute for help. {color} |
\\
\\
|| Subsystem || Report/Notes ||
| JIRA Patch URL | https://issues.apache.org/jira/secure/attachment/12783781/HADOOP-12711.001.patch |
| JIRA Issue | HADOOP-12711 |
| Powered by | Apache Yetus 0.2.0-SNAPSHOT   http://yetus.apache.org |
| Console output | https://builds.apache.org/job/PreCommit-HADOOP-Build/8448/console |


This message was automatically generated.



> Remove dependency on commons-httpclient for ServletUtil
> -------------------------------------------------------
>
>                 Key: HADOOP-12711
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12711
>             Project: Hadoop Common
>          Issue Type: Sub-task
>            Reporter: Wei-Chiu Chuang
>            Assignee: Wei-Chiu Chuang
>         Attachments: HADOOP-12711.001.patch
>
>
> This is a branch-2 only change, as ServletUtil for trunk removes the code that depends on commons-httpclient.
> We need to retire the use of commons-httpclient in Hadoop to address the security concern in CVE-2012-5783 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5783.
> {noformat}
> import org.apache.commons.httpclient.URIException;
> import org.apache.commons.httpclient.util.URIUtil;
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)