[HBASE-27586] Bump up commons-codec to 1.15

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.6.0, 3.0.0-alpha-4, 2.4.16, 2.5.3
• Component/s: dependencies, security
• Hadoop Flags: Reviewed
• Assignee: Rajeshbabu Chintaguntla
• Reporter: Rajeshbabu Chintaguntla
• Created: 24/Jan/23 05:50
• Updated: 29/Jan/23 04:03
• Resolved: 27/Jan/23 15:22

Description

commons-codec 1.15 has proper fix of few CVEs which may not effect in HBase but better to upgrade to ensure compliance.
Ex: While a fix was earlier made to commons-codec:commons-codec version 1.13, it was later found out to be incomplete. A complete fix exists in version 1.14 and that is the version users should upgrade to.

Issue Links

• links to: GitHub Pull Request #4993