[FELIX-6391] Update embedded commons-io to 2.8.0

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: http.jetty-4.1.4
• Fix Version/s: http.jetty-4.1.6
• Component/s: HTTP Service
• Assignee: Carsten Ziegeler
• Reporter: Akanksha Jain
• Created: 03/Mar/21 08:25
• Updated: 18/Mar/21 05:58
• Resolved: 03/Mar/21 08:42

Description

Apache Felix Http Jetty: 4.1.4 has embedded commons-io.2.6.jar which is vulnerable to
"sonatype-2018-0705".
The vulnerability has been fixed in commons-io: 2.7.

Related Commons-io JIRA: https://issues.apache.org/jira/browse/IO-556

Need to update commons-io latest version in Apache Felix HTTP Jetty module.

 

 

Issue Links

• links to: GitHub Pull Request #72