OpenSearch/plugins/repository-hdfs/licenses
Rabi Panda 50abf6d066
[CVE] Upgrade dependencies to mitigate CVEs (#657)
This PR upgrade the following dependencies to fix CVEs.

- commons-codec:1.12 (->1.13) apache/commons-codec@48b6157
- ant:1.10.8 (->1.10.9) https://ant.apache.org/security.html
- jackson-databind:2.10.4 (->2.11.0) FasterXML/jackson-databind#2589
- jackson-dataformat-cbor:2.10.4 (->2.11.0) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28491
- apache-httpclient:4.5.10 (->4.5.13) https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-13956
- checkstyle:8.20 (->8.29) https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10782
- junit:4.12 (->4.13.1) https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp
- netty:4.1.49.Final (->4.1.59) https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2

Signed-off-by: Rabi Panda <adnapibar@gmail.com>
2021-05-18 11:37:24 -07:00
..
commons-cli-1.2.jar.sha1
commons-cli-LICENSE.txt
commons-cli-NOTICE.txt
commons-codec-1.13.jar.sha1 [CVE] Upgrade dependencies to mitigate CVEs (#657) 2021-05-18 11:37:24 -07:00
commons-codec-LICENSE.txt
commons-codec-NOTICE.txt
commons-collections-3.2.2.jar.sha1
commons-collections-LICENSE.txt
commons-collections-NOTICE.txt
commons-configuration-1.6.jar.sha1
commons-configuration-LICENSE.txt
commons-configuration-NOTICE.txt
commons-io-2.4.jar.sha1
commons-io-LICENSE.txt
commons-io-NOTICE.txt
commons-lang-2.6.jar.sha1
commons-lang-LICENSE.txt
commons-lang-NOTICE.txt
commons-logging-1.1.3.jar.sha1
commons-logging-LICENSE.txt
commons-logging-NOTICE.txt
guava-30.1.1-jre.jar.sha1 [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
guava-LICENSE.txt
guava-NOTICE.txt
hadoop-LICENSE.txt
hadoop-NOTICE.txt
hadoop-annotations-2.10.1.jar.sha1 [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
hadoop-auth-2.10.1.jar.sha1 [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
hadoop-client-2.10.1.jar.sha1 [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
hadoop-common-2.10.1.jar.sha1 [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
hadoop-hdfs-2.10.1.jar.sha1 [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
hadoop-hdfs-client-2.10.1.jar.sha1 [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
htrace-core4-4.0.1-incubating.jar.sha1
htrace-core4-LICENSE.txt
htrace-core4-NOTICE.txt
log4j-1.2-api-2.11.1.jar.sha1
log4j-LICENSE.txt
log4j-NOTICE.txt
log4j-slf4j-impl-2.11.1.jar.sha1
log4j-slf4j-impl-LICENSE.txt
log4j-slf4j-impl-NOTICE.txt
protobuf-java-2.5.0.jar.sha1
protobuf-java-LICENSE.txt
protobuf-java-NOTICE.txt
servlet-api-2.5.jar.sha1
servlet-api-LICENSE.txt
servlet-api-NOTICE.txt
slf4j-api-1.6.2.jar.sha1
slf4j-api-LICENSE.txt
slf4j-api-NOTICE.txt
stax2-api-4.2.1.jar.sha1 [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
stax2-api-LICENSE.txt [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
stax2-api-NOTICE.txt [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
woodstox-core-6.1.1.jar.sha1 [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
woodstox-core-LICENSE.txt [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00
woodstox-core-NOTICE.txt [CVE-2018-11765] Upgrade hadoop dependencies for hdfs plugin (#654) 2021-05-13 14:56:47 -07:00