| Fix Version | 
Key | 
Component | 
Summary | 
Type | 
Resolution | 
Status | 
| - | 
FILEUPLOAD-331 | 
- | 
Solve warnings / error checkstyle | 
Bug | 
Fixed | 
Resolved | 
| - | 
FILEUPLOAD-329 | 
- | 
Fix multiples errors fileupload_checks.xml config file | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-327 | 
- | 
Solve SpotBug warning/errors | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-299 | 
- | 
Error replacing an existing file using FileItem.write | 
Bug | 
Fixed | 
Resolved | 
| - | 
FILEUPLOAD-294 | 
- | 
Link "Source repository" is broken on project website | 
Bug | 
Fixed | 
Resolved | 
| - | 
FILEUPLOAD-238 | 
- | 
Default charset hardcoded in FileItem (must be used Charset.defaultCharset()) | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-118 | 
- | 
Maven pom has invalid parent | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-110 | 
- | 
MultipartStream's keep region padding is either unnecessary or untested (and undocumented) | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-72 | 
- | 
Java docs bug | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-70 | 
- | 
DefaultFileItem should not catch Exception | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-67 | 
- | 
possible typo in fileupload docs on commons site | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-66 | 
- | 
DefaultFileItem issues | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-61 | 
- | 
Temporary upload files are not being deleted | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-59 | 
- | 
[fileupload] Memory Issue | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-57 | 
- | 
[fileupload] Sample code is not working | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-56 | 
- | 
[FileUpload] uploading files with non-ASCII filenames | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-53 | 
- | 
UnknownSizeException with IE5.0 (due to IE5.0 bug) | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-50 | 
- | 
[fileupload] FileItem implements Serializable incorrectly | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-48 | 
- | 
[fileupload] Memory leak in DefaultFileItem | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-46 | 
- | 
[fileupload] Default encoding issue running Tomcat on z/os | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-40 | 
- | 
FileUploadBase does not handle quoted boundary specification, which is required by RFC 1521 | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-39 | 
- | 
[fileupload] Content-Type with quoted boundary doesn't work | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-37 | 
- | 
[fileupload] Two typos in the manual page of MultipartStream | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-35 | 
- | 
file upload can be very slow | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-31 | 
- | 
[PATCH] Added some tests | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-29 | 
- | 
[fileupload] Remove Javadoc warnings | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-22 | 
- | 
FileUpload default constructor does not create a factory | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-21 | 
- | 
DefaultFileItem.write() throws NullPointerException if a stream cannot be created | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-18 | 
- | 
contentType comparisons should be case-insensitive | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-16 | 
- | 
[fileupload][PATCH] Workaround for IE5 Mac type=image bug | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-13 | 
- | 
[fileupload] Use the ServletRequest encoding as default | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-12 | 
- | 
[fileupload] Remove deprecations issued in IO 1.1 | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-5 | 
- | 
[fileupload] Determining content type | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-4 | 
- | 
[fileupload] The common upload functions do not work on z/OS WebSphere | 
Bug | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-330 | 
- | 
Add taglist-maven-plugin  | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-328 | 
- | 
Switch from Cobertura code coverage to Jacoco code coverage as all commons projects | 
Improvement | 
Fixed | 
Resolved | 
| - | 
FILEUPLOAD-310 | 
- | 
Minor improvements | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-140 | 
- | 
Means to preserve text parameters when upload limit exceeded | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-133 | 
- | 
Refactor use of FileCleaner into plugable strategy to allow overriding. | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-128 | 
- | 
move commons-fileupload to org.apache.commons.fileupload groupId in maven | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-109 | 
- | 
MultipartStream.discardBodyData()  implementation is redundant. | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-105 | 
- | 
Support for Portlets (168) | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-101 | 
- | 
[FileUpload] does not take 'charset' parameter of the 'Content-Type' header into consideration | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-100 | 
- | 
[fileupload] Allow to set headerEncoding to other than platform default encoding for fall-back | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-95 | 
- | 
native memory leak results in container crash | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-94 | 
- | 
Fileupload fails for forms with a large number of inputs | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-93 | 
- | 
[fileupload] Allow parsing requests of unknown length | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-92 | 
- | 
The size threshold parameter works based on the whole request instead of individual parts | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-86 | 
- | 
File upload exceptions. | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-83 | 
- | 
[fileupload][patch] Small improvements for FileUploadBase getFileName and getFieldName | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-78 | 
- | 
Documentation: illustrate how to integrate virus control | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-77 | 
- | 
[fileupload] State the maximum size in the error message | 
Improvement | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-323 | 
- | 
Implement spotbugs | 
New Feature | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-148 | 
- | 
FileItemFactory.setMaxStringLength() | 
New Feature | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-290 | 
- | 
When a large file is uploaded, if there is a refresh page or other operation, the servlet will get a new request, and the file upload request will be aborted. | 
Wish | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-132 | 
- | 
How do we retrieve the HTTP Headers in the request? | 
Wish | 
Fixed | 
Closed | 
| - | 
FILEUPLOAD-114 | 
- | 
Documentation: dependency on commons-io and other things | 
Wish | 
Fixed | 
Closed | 
| 1.6.0 | 
FILEUPLOAD-357 | 
- | 
Backport commons-io upgrade in 1.x for CVE-2024-47554 | 
Bug | 
Fixed | 
Resolved | 
| 2.0.0-M1 | 
FILEUPLOAD-342 | 
- | 
FileUploadBase should not import HttpServletRequest | 
Improvement | 
Fixed | 
Resolved | 
| 2.0.0-M1 | 
FILEUPLOAD-349 | 
- | 
Update javax libs to Jakarta libs in commons-fileupload jar | 
New Feature | 
Fixed | 
Resolved | 
| 2.0.0-M1 | 
FILEUPLOAD-345 | 
- | 
Support for Servlet 5 | 
Wish | 
Fixed | 
Resolved | 
| 2.0.0-M1 | 
FILEUPLOAD-309 | 
- | 
Release version 2.0.0 | 
Wish | 
Fixed | 
Resolved | 
| 2.0.0-M2 | 
FILEUPLOAD-358 | 
- | 
Release history link changed from changes-report.html to changes.html | 
Bug | 
Fixed | 
Resolved | 
| 2.0.0-M2 | 
FILEUPLOAD-352 | 
- | 
NullPointerException in DiskFileItem#toString | 
Bug | 
Fixed | 
Resolved | 
| 2.0.0-M2 | 
FILEUPLOAD-344 | 
- | 
Check final variable  checkstyle | 
Improvement | 
Fixed | 
Resolved | 
| 1.5 | 
FILEUPLOAD-347 | 
- | 
CVE in commons-io versions less than 2.7  | 
Task | 
Fixed | 
Closed | 
| 1.5 | 
FILEUPLOAD-343 | 
- | 
Update Project Version | 
Wish | 
Fixed | 
Closed | 
| 1.4.1 | 
FILEUPLOAD-296 | 
- | 
Speed Up Parsing | 
Bug | 
Fixed | 
Resolved | 
| 1.4.1 | 
FILEUPLOAD-293 | 
- | 
FileExistsException: Destination .. already exists when DiskFileItem.write was given an existing file | 
Bug | 
Fixed | 
Resolved | 
| 1.3.3 | 
FILEUPLOAD-279 | 
- | 
CVE-2016-1000031 - Apache Commons FileUpload DiskFileItem File Manipulation Remote Code Execution | 
Bug | 
Fixed | 
Closed | 
| 2.0.0 | 
FILEUPLOAD-356 | 
- | 
Link to "changes report" for commons-fileupload is wrong | 
Bug | 
Fixed | 
Resolved | 
| 2.0.0 | 
FILEUPLOAD-274 | 
- | 
File Upload fails to recognize RFC 5987-compliant filename | 
Bug | 
Fixed | 
Resolved | 
| 2.0.0 | 
FILEUPLOAD-193 | 
- | 
FileNotFoundException thrown by DiskFileItem.write | 
Bug | 
Fixed | 
Resolved | 
| 2.0.0 | 
FILEUPLOAD-350 | 
- | 
FileUploadByteCountLimitException ctor switches fileName and fieldName parameters | 
Improvement | 
Fixed | 
Resolved | 
| 2.0.0 | 
FILEUPLOAD-340 | 
- | 
Make commons-fileupload a proper JPMS module | 
Improvement | 
Fixed | 
Resolved | 
| 2.0.0 | 
FILEUPLOAD-286 | 
- | 
default charset override | 
Improvement | 
Fixed | 
Resolved | 
| 2.0.0 | 
FILEUPLOAD-302 | 
- | 
Upgrade test framework to JUnit Jupiter | 
Task | 
Fixed | 
Resolved | 
| 2.0.0 | 
FILEUPLOAD-355 | 
- | 
Update code example: Use IOUtils instead of Streams utils class | 
Wish | 
Fixed | 
Resolved | 
| 2.0.0 | 
FILEUPLOAD-341 | 
- | 
Move exceptions out of .impl package | 
Wish | 
Fixed | 
Resolved | 
| 1.4 | 
FILEUPLOAD-258 | 
- | 
Empty files in mutipart requests aren't saved to disk | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-257 | 
- | 
Fix Javadoc 1.8 errors | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-252 | 
- | 
DiskFileItem#write can lose original IO error | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-251 | 
- | 
DiskFileItem#getTempFile() is broken | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-250 | 
- | 
FileUploadBase - potential resource leak - InputStream not closed on exception | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-248 | 
- | 
[DISK] Unsafe file move operation (possibly swallowing write errors) | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-246 | 
- | 
FileUpload should use IOUtils.closeQuietly where relevant | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-245 | 
- | 
DiskFileItem.get() may not fully read the data | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-244 | 
- | 
.DiskFileItem.readObject fails to close FileInputStream | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-242 | 
- | 
Should not catch and ignore Throwable | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-234 | 
- | 
Bug in docs: tmp file delete conditions in "Resource Cleanup" section of "using.html" | 
Bug | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-292 | 
- | 
Don't create un-needed resources in FileUploadBase.java | 
Improvement | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-283 | 
- | 
Add tests to the portlet package | 
Improvement | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-282 | 
- | 
Upversion complier.source, compiler.target to 1.6 | 
Improvement | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-273 | 
- | 
Test Coverage Report | 
Improvement | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-254 | 
- | 
Improve MultipartStream public API | 
Improvement | 
Fixed | 
Resolved | 
| 1.4 | 
FILEUPLOAD-243 | 
- | 
Make some MultipartStream private fields final | 
Improvement | 
Fixed | 
Closed | 
| 1.4 | 
FILEUPLOAD-237 | 
- | 
Update Documenation for Streaming | 
Improvement | 
Fixed | 
Closed | 
| Nightly Builds, 1.4 | 
FILEUPLOAD-288 | 
- | 
Linux dentry cache memory leak due to inappropriate temporary file detection | 
Improvement | 
Fixed | 
Closed | 
| Nightly Builds | 
FILEUPLOAD-177 | 
- | 
FAQ update to clarify 'struts' -> 'struts 1' | 
Task | 
Fixed | 
Closed | 
| 1.3.2, 1.4 | 
FILEUPLOAD-272 | 
- | 
Performance Improvement in MultipartStream | 
Improvement | 
Fixed | 
Closed |