Browse Source

HADOOP-17571 : Bump up woodstox-core to 5.3.0 due to security concerns (#2757)

Contributed by Viraj Jasani.

Signed-off-by: Mingliang Liu <liuml07@apache.org>
Signed-off-by: Akira Ajisaka <aajisaka@apache.org>
Viraj Jasani 4 years ago
parent
commit
36313b38cb
1 changed files with 2 additions and 1 deletions
  1. 2 1
      hadoop-project/pom.xml

+ 2 - 1
hadoop-project/pom.xml

@@ -210,6 +210,7 @@
     <powermock.version>1.5.6</powermock.version>
     <powermock.version>1.5.6</powermock.version>
     <solr.version>7.7.0</solr.version>
     <solr.version>7.7.0</solr.version>
     <openssl-wildfly.version>1.0.7.Final</openssl-wildfly.version>
     <openssl-wildfly.version>1.0.7.Final</openssl-wildfly.version>
+    <woodstox.version>5.3.0</woodstox.version>
   </properties>
   </properties>
 
 
   <dependencyManagement>
   <dependencyManagement>
@@ -1109,7 +1110,7 @@
       <dependency>
       <dependency>
         <groupId>com.fasterxml.woodstox</groupId>
         <groupId>com.fasterxml.woodstox</groupId>
         <artifactId>woodstox-core</artifactId>
         <artifactId>woodstox-core</artifactId>
-        <version>5.0.3</version>
+        <version>${woodstox.version}</version>
       </dependency>
       </dependency>
       <dependency>
       <dependency>
         <groupId>org.codehaus.jackson</groupId>
         <groupId>org.codehaus.jackson</groupId>