Update Apache commons-httpclient.jar
Openfire bundles and uses an ancient / non supported Apache HTTPComponents library. This needs to be updated to keep security folks happy.
January 7, 2019, 9:56 AM
Fixed as part of
January 7, 2019, 3:12 AM
Greg, could you kindly comment if this issue is still valid?