HADOOP-17571 : Bump up woodstox-core to 5.3.0 due to security concerns (#2757)

Contributed by Viraj Jasani.

Signed-off-by: Mingliang Liu <liuml07@apache.org>
Signed-off-by: Akira Ajisaka <aajisaka@apache.org>
This commit is contained in:
Viraj Jasani 2021-03-12 01:21:24 +05:30 committed by Mingliang Liu
parent 8bd58c7391
commit 3bb40d2a56
No known key found for this signature in database
GPG Key ID: BC2FB8C6908A0C16

View File

@ -143,6 +143,7 @@
<!-- the version of Hadoop declared in the version resources; can be overridden
so that Hadoop 3.x can declare itself a 2.x artifact. -->
<declared.hadoop.version>${project.version}</declared.hadoop.version>
<woodstox.version>5.3.0</woodstox.version>
</properties>
<dependencyManagement>
@ -495,7 +496,6 @@
<artifactId>hadoop-openstack</artifactId>
<version>${project.version}</version>
</dependency>
<dependency>
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-azure</artifactId>
@ -676,7 +676,6 @@
<artifactId>guice</artifactId>
<version>3.0</version>
</dependency>
<dependency>
<groupId>cglib</groupId>
<artifactId>cglib</artifactId>
@ -887,7 +886,7 @@
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
<artifactId>woodstox-core</artifactId>
<version>5.0.3</version>
<version>${woodstox.version}</version>
</dependency>
<dependency>
<groupId>org.codehaus.jackson</groupId>
@ -1189,7 +1188,6 @@
<version>1.46</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>joda-time</groupId>
<artifactId>joda-time</artifactId>