Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-69994

Prepare Nexus Artifact Uploader for removal of Commons HttpClient 3.x

XMLWordPrintable

    • 2.14

      Core still bundles a patched version of the deprecated Commons HttpClient 3.x library for use by plugins. This frequently confuses security scanners and is a maintenance liability. For this reason, we would like to remove this library from Jenkins core in jenkinsci/jenkins#7312.

      A systematic search of the plugin corpus was conducted in October 2022; this search revealed that a number of plugins have usages of Commons HttpClient 3.x. For compatibility with a future version of Jenkins core in which this library is removed, these plugins should either migrate their usage of Commons HttpClient 3.x to the Apache HttpComponents Client 4.x API plugin or Java 11 native HTTP client; or otherwise they should declare an explicit dependency on the Commons HttpClient 3.x API plugin.

      This plugin's identified usage of Commons HttpClient 3.x is as follows:

      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/auth/AuthScope via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/CircularRedirectException via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider$ApacheClientRunnable.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/Credentials via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/DefaultHttpMethodRetryHandler via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/Header via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider$ApacheClientRunnable.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/Header via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/Header via com/ning/http/client/providers/apache/ApacheResponseHeaders.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HostConfiguration via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HttpClient via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider$ApacheClientRunnable.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HttpClient via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HttpMethodBase via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider$ApacheClientRunnable$1.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HttpMethodBase via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider$ApacheClientRunnable.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HttpMethodBase via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HttpMethodBase via com/ning/http/client/providers/apache/ApacheResponseFuture.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HttpMethodBase via com/ning/http/client/providers/apache/ApacheResponseHeaders.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HttpMethodBase via com/ning/http/client/providers/apache/ApacheResponseStatus.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/HttpState via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/ByteArrayRequestEntity via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/DeleteMethod via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/EntityEnclosingMethod via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/GetMethod via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/HeadMethod via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/InputStreamRequestEntity via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/multipart/ByteArrayPartSource via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/multipart/FilePart via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/multipart/MultipartRequestEntity via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/multipart/PartSource via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/multipart/Part via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/multipart/StringPart via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/OptionsMethod via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/PostMethod via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/PutMethod via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/RequestEntity via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider$EntityWriterRequestEntity.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/methods/StringRequestEntity via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/MultiThreadedHttpConnectionManager via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/NoHttpResponseException via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider$ApacheClientRunnable.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/params/HttpClientParams via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/params/HttpConnectionParams via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider$1.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/params/HttpMethodParams via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/protocol/ProtocolSocketFactory via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider$1.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/protocol/Protocol via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/ProxyHost via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/StatusLine via com/ning/http/client/providers/apache/ApacheResponseStatus.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/UsernamePasswordCredentials via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class
      Plugin nexus-artifact-uploader:2.13 using org/apache/commons/httpclient/util/IdleConnectionTimeoutThread via com/ning/http/client/providers/apache/ApacheAsyncHttpProvider.class

            pskumar448 Suresh Kumar
            basil Basil Crow
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: