[SOLR-13878] Update commons-fileupload to 1.4 to fix potential resource leak issue

• Type: Task
• Status: Closed
• Priority: Minor
• Resolution: Not A Problem
• Affects Version/s: 8.2
• Fix Version/s: 8.6
• Component/s: Build
• Assignee: Unassigned
• Reporter: Charles Dumont
• Created: 28/Oct/19 16:03
• Updated: 19/Aug/20 11:36
• Resolved: 22/May/20 05:21

Description

commons-fileupload version 1.3 has a potential resource leak issue as described here: https://issues.apache.org/jira/browse/FILEUPLOAD-250.  solr currently has a dependency on 1.3 and should update to 1.4 to avoid being potentially impacted by this issue.

Issue Links

• is related to: FILEUPLOAD-250 FileUploadBase - potential resource leak - InputStream not closed on exception
• is related to: SOLR-12204 Upgrade commons-fileupload to address CVE-2016-1000031
• is superceded by: SOLR-14461 Replace commons-fileupload use with standard Servlet/Jetty