[CAMEL-18246] CVE-2022-26612: Upgrade hadoop-common >= 3.3.3

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.18.1, 3.19.0
• Estimated Complexity: Unknown
• Assignee: Alex Dettinger
• Reporter: Alex Dettinger
• Created: 29/Jun/22 11:17
• Updated: 30/Jul/22 08:32
• Resolved: 30/Jul/22 08:32

Description

It relates to CAMEL-QUARKUS-3763.

hdfs could be upgraded to 3.3.3, so that's ok.

However, hbase can't be updated to hadoop-common 2.10.2 as some tests fail. Plus we are not sure whether 2.10.2 is really safer. If it's not maintained actively, maybe deprecation would be needed.

Issue Links

• links to: GitHub Pull Request #7928
• links to: GitHub Pull Request #7943
• links to: GitHub Pull Request #7970
• links to: GitHub Pull Request #7972