[FLUME-3113] Upgrade commons-beanutils library dependency

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.7.0
• Fix Version/s: 1.10.0
• Labels: dependency
• Release Note: Flume no longer has commons-beanutils as a dependency.
• Assignee: Unassigned
• Reporter: Attila Simon
• Created: 05/Jul/17 08:49
• Updated: 17/Sep/22 17:23
• Resolved: 17/Sep/22 17:23

Description

Group	Artifact	Version used	Upgrade target
commons-beanutils	commons-beanutils	1.7.0	1.9.3
commons-beanutils	commons-beanutils-core	1.8.0	1.8.3

Security vulnerability: https://www.cvedetails.com/cve/CVE-2014-0114/

Please do:

• double check the newest version.
• consider to remove a dependency if better alternative is available.
• check whether the lib change would introduce a backward incompatibility (in which case please add this label `breaking_change` and fix version should be the next major)

Issue Links

• Is contained by: FLUME-3151 Upgrade Hadoop to 2.10.1