From 2875462c2b21de0ab86fc000c0241dcf608d4450 Mon Sep 17 00:00:00 2001
From: Akira Ajisaka <aajisaka@apache.org>
Date: Tue, 9 May 2017 11:47:28 -0500
Subject: [PATCH] HADOOP-14100. Upgrade Jsch jar to latest version to fix
 vulnerability in old versions. Contributed by Vinayakumar B and Brahma Reddy
 Battula.

---
 hadoop-common-project/hadoop-common/CHANGES.txt | 3 +++
 hadoop-project/pom.xml                          | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/hadoop-common-project/hadoop-common/CHANGES.txt b/hadoop-common-project/hadoop-common/CHANGES.txt
index 7929ebdbcec..7fd2320a8f8 100644
--- a/hadoop-common-project/hadoop-common/CHANGES.txt
+++ b/hadoop-common-project/hadoop-common/CHANGES.txt
@@ -135,6 +135,9 @@ Release 2.7.4 - UNRELEASED
     HADOOP-14374. License error in GridmixTestUtils.java.
     (lixinglong via aajisaka)
 
+    HADOOP-14100. Upgrade Jsch jar to latest version to fix vulnerability in
+    old versions. (Vinayakumar B and Brahma Reddy Battula via aajisaka)
+
 Release 2.7.3 - 2016-08-25
 
   INCOMPATIBLE CHANGES
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index ee47dc02043..dca3d3753c1 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -791,7 +791,7 @@
       <dependency>
         <groupId>com.jcraft</groupId>
         <artifactId>jsch</artifactId>
-        <version>0.1.42</version>
+        <version>0.1.54</version>
       </dependency>
       <dependency>
         <groupId>org.apache.htrace</groupId>