[HADOOP-12711] Remove dependency on commons-httpclient for ServletUtil

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8.0
• Fix Version/s: 2.8.0
• Target Version/s: 2.8.0
• Assignee: Wei-Chiu Chuang
• Reporter: Wei-Chiu Chuang
• Created: 14/Jan/16 19:19
• Updated: 02/Oct/19 17:15
• Resolved: 26/Feb/16 06:55

Description

This is a branch-2 only change, as ServletUtil for trunk removes the code that depends on commons-httpclient.

We need to retire the use of commons-httpclient in Hadoop to address the security concern in CVE-2012-5783 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5783.

import org.apache.commons.httpclient.URIException;
import org.apache.commons.httpclient.util.URIUtil;

Issue Links

• is depended upon by: HADOOP-12552 Fix undeclared/unused dependency to httpclient