[HBASE-27424] Upgrade Jettison for CVE-2022-40149/40150

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.6.0, 2.5.1, 3.0.0-alpha-4, 2.4.15
• Hadoop Flags: Reviewed
• Assignee: Andrew Kyle Purtell
• Reporter: Andrew Kyle Purtell
• Created: 11/Oct/22 00:39
• Updated: 24/Oct/22 20:53
• Resolved: 11/Oct/22 17:13

Description

Jettison versions <= 1.5.0 are subject to CVE-2022-40149 and CVE-2022-40150.

Move jettison.version to 1.5.1.

Issue Links

• links to: GitHub Pull Request #4822