We are using only very minimal subset of apache-commons-configuration functions in ovirt-engine. Also apache-commons-configuration depends on apache-commons-logging, which is included in maven:3.5 module in EL 8, but it was removed from newer maven:3.6 module, so it blocks the upgrade. So it would be better for future maintainability to reimplement required functionality of commons-configuration within ovirt-engine itself.
This is important because maven 3.5 appstream went out of support this month
This bug has low overall severity and is not going to be further verified by QE. If you believe special care is required, feel free to properly align relevant severity, flags and keywords to raise PM_Score or use one of the Bumps ('PrioBumpField', 'PrioBumpGSS', 'PrioBumpPM', 'PrioBumpQA') in Keywords to raise it's PM_Score above verification threashold (1000).
This bug has low overall severity and passed an automated regression suite, and is not going to be further verified by QE. If you believe special care is required, feel free to re-open to ON_QA status.