[HADOOP-15970] Upgrade plexus-utils from 2.0.5 to 3.1.0

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.4, 3.3.0, 3.1.2, 3.2.1
• Component/s: security
• Target Version/s: 3.0.4, 3.3.0, 3.1.2, 3.2.1
• Assignee: Akira Ajisaka
• Reporter: Akira Ajisaka
• Created: 04/Dec/18 06:56
• Updated: 04/Dec/18 14:17
• Resolved: 04/Dec/18 13:49

Description

Apache Hadoop uses plexus-utils 2.0.5 and it is vulnerable.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000487

Let's update the version or remove the usage of this library.