[jira] [Commented] (HADOOP-12767) update apache httpclient version to the latest 4.5 for security

[Masatake Iwasaki (JIRA)]

    [ 
https://issues.apache.org/jira/browse/HADOOP-12767?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15253905#comment-15253905
 ] 

Masatake Iwasaki commented on HADOOP-12767:
-------------------------------------------

[~artem.aliev] and [~jojochuang], can you address the checkstyle warnings and 
deprecation warnings?

{noformat}
<error line="429" column="7" severity="error" message="&apos;{&apos; should be 
on the previous line." 
source="com.puppycrawl.tools.checkstyle.checks.blocks.LeftCurlyCheck"/>
<error line="430" severity="error" message="Line is longer than 80 characters 
(found 82)." 
source="com.puppycrawl.tools.checkstyle.checks.sizes.LineLengthCheck"/>
<error line="432" column="9" severity="error" message="&apos;{&apos; should be 
on the previous line." 
source="com.puppycrawl.tools.checkstyle.checks.blocks.LeftCurlyCheck"/>
{noformat}

{noformat}
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[66,37] 
org.apache.http.client.params.ClientPNames in org.apache.http.client.params has 
been deprecated
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[67,37] 
org.apache.http.client.params.CookiePolicy in org.apache.http.client.params has 
been deprecated
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[69,35] 
org.apache.http.conn.params.ConnRoutePNames in org.apache.http.conn.params has 
been deprecated
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[71,35] 
org.apache.http.impl.client.DefaultHttpClient in org.apache.http.impl.client 
has been deprecated
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[184,5] 
org.apache.http.impl.client.DefaultHttpClient in org.apache.http.impl.client 
has been deprecated
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[184,36] 
org.apache.http.impl.client.DefaultHttpClient in org.apache.http.impl.client 
has been deprecated
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[189,30] 
org.apache.http.client.params.ClientPNames in org.apache.http.client.params has 
been deprecated
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[187,23] 
org.apache.http.client.params.ClientPNames in org.apache.http.client.params has 
been deprecated
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[188,13] 
org.apache.http.client.params.CookiePolicy in org.apache.http.client.params has 
been deprecated
[WARNING] 
.../org/apache/hadoop/yarn/server/webproxy/WebAppProxyServlet.java:[198,23] 
org.apache.http.conn.params.ConnRoutePNames in org.apache.http.conn.params has 
been deprecated
{noformat}


> update apache httpclient version to the latest 4.5 for security
> ---------------------------------------------------------------
>
>                 Key: HADOOP-12767
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12767
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: build
>    Affects Versions: 2.7.2
>            Reporter: Artem Aliev
>            Assignee: Artem Aliev
>         Attachments: HADOOP-12767-branch-2.004.patch, HADOOP-12767.001.patch, 
> HADOOP-12767.002.patch, HADOOP-12767.003.patch, HADOOP-12767.004.patch
>
>
> Various SSL security fixes are needed.  See:  CVE-2012-6153, CVE-2011-4461, 
> CVE-2014-3577, CVE-2015-5262.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)