We need to update the Http Client libraries, to address a couple of CVEs.
apache httpclient => 4.5.2
httpcore => 4.4.4
We've done this for Hadoop in
HADOOP-12767; this will be the same.
- increment the versions
- identify where minor version incompatibilities surface. (static code review)