[FLUME-3114] Upgrade commons-httpclient library dependency

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.7.0
• Fix Version/s: 1.8.1, 1.9.0
• Labels: dependency
• Assignee: Unassigned
• Reporter: Attila Simon
• Created: 05/Jul/17 15:55
• Updated: 12/Nov/18 14:01
• Resolved: 12/Nov/18 14:01

Description

Group	Artifact	Version used	Upgrade target
commons-httpclient	commons-httpclient	3.1,3.0.1	4.5.2

Note: This artifact was moved to:

• New Group org.apache.httpcomponents
• New Artifact httpclient

Security vulnerability: https://www.cvedetails.com/cve/CVE-2012-5783/

Please do:

• double check the newest version.
• consider to remove a dependency if better alternative is available.
• check whether the lib change would introduce a backward incompatibility (in which case please add this label `breaking_change` and fix version should be the next major)

Issue Links

• relates to: FLUME-2501 Updating HttpClient lib version to ensure compat with Solr
• relates to: FLUME-2914 Upgrade httpclient version 4.3.6