This is an automated email from the ASF dual-hosted git repository.

cwylie pushed a commit to branch 26.0.0
in repository https://gitbox.apache.org/repos/asf/druid.git


The following commit(s) were added to refs/heads/26.0.0 by this push:
     new 2c8a6785a8 update hadoop3 to 3.3.5 to fix security vulnerabilities
2c8a6785a8 is described below

commit 2c8a6785a8129328dc8652a293199d41f0a0807d
Author: Clint Wylie <[email protected]>
AuthorDate: Thu May 11 23:14:55 2023 -0700

    update hadoop3 to 3.3.5 to fix security vulnerabilities
---
 extensions-core/hdfs-storage/pom.xml | 12 ++++++++++++
 licenses.yaml                        |  2 +-
 pom.xml                              |  2 +-
 3 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/extensions-core/hdfs-storage/pom.xml 
b/extensions-core/hdfs-storage/pom.xml
index cee0555fae..7d76ff397c 100644
--- a/extensions-core/hdfs-storage/pom.xml
+++ b/extensions-core/hdfs-storage/pom.xml
@@ -45,6 +45,12 @@
           <artifactId>hadoop-aws</artifactId>
           <version>${hadoop.compile.version}</version>
           <scope>runtime</scope>
+          <exclusions>
+            <exclusion>
+              <groupId>com.amazonaws</groupId>
+              <artifactId>aws-java-sdk-bundle</artifactId>
+            </exclusion>
+          </exclusions>
         </dependency>
         <dependency>
             <groupId>commons-io</groupId>
@@ -447,6 +453,12 @@
           <version>${hadoop.compile.version}</version>
           <scope>test</scope>
         </dependency>
+        <dependency>
+          <groupId>com.amazonaws</groupId>
+          <artifactId>aws-java-sdk-s3</artifactId>
+          <version>${aws.sdk.version}</version>
+          <scope>runtime</scope>
+        </dependency>
         <dependency>
           <groupId>log4j</groupId>
           <artifactId>log4j</artifactId>
diff --git a/licenses.yaml b/licenses.yaml
index 416e3e0bff..bf3ca3baa1 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -2913,7 +2913,7 @@ name: Apache Hadoop
 license_category: binary
 module: hadoop-client
 license_name: Apache License version 2.0
-version: 3.3.1
+version: 3.3.5
 libraries:
   - org.apache.hadoop: hadoop-annotations
   - org.apache.hadoop: hadoop-auth
diff --git a/pom.xml b/pom.xml
index ad65e28a03..9a6d181e82 100644
--- a/pom.xml
+++ b/pom.xml
@@ -2040,7 +2040,7 @@
           </property>
         </activation>
         <properties>
-          <hadoop.compile.version>3.3.1</hadoop.compile.version>
+          <hadoop.compile.version>3.3.5</hadoop.compile.version>
           
<hibernate-validator.version>5.3.6.Final</hibernate-validator.version>
           <httpclient.version>4.5.13</httpclient.version>
         </properties>


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to