HADOOP-17571 : Bump up woodstox-core to 5.3.0 due to security concerns (#2757)

Contributed by Viraj Jasani.

Signed-off-by: Mingliang Liu <liuml07@apache.org>
Signed-off-by: Akira Ajisaka <aajisaka@apache.org>

hadoop-project/pom.xml

@@ -143,6 +143,7 @@
     <!-- the version of Hadoop declared in the version resources; can be overridden
     so that Hadoop 3.x can declare itself a 2.x artifact. -->
     <declared.hadoop.version>${project.version}</declared.hadoop.version>
+    <woodstox.version>5.3.0</woodstox.version>
   </properties>
 
   <dependencyManagement>
@@ -495,7 +496,6 @@
         <artifactId>hadoop-openstack</artifactId>
         <version>${project.version}</version>
       </dependency>
-      
       <dependency>
         <groupId>org.apache.hadoop</groupId>
         <artifactId>hadoop-azure</artifactId>
@@ -676,7 +676,6 @@
         <artifactId>guice</artifactId>
         <version>3.0</version>
       </dependency>
-      
       <dependency>
         <groupId>cglib</groupId>
         <artifactId>cglib</artifactId>
@@ -887,7 +886,7 @@
       <dependency>
         <groupId>com.fasterxml.woodstox</groupId>
         <artifactId>woodstox-core</artifactId>
-        <version>5.0.3</version>
+        <version>${woodstox.version}</version>
       </dependency>
       <dependency>
         <groupId>org.codehaus.jackson</groupId>
@@ -1189,7 +1188,6 @@
        <version>1.46</version>
        <scope>test</scope>
      </dependency>
-      
      <dependency>
         <groupId>joda-time</groupId>
         <artifactId>joda-time</artifactId>