Upgrade hadoop client to fix vulnerability

[kaklakariada]

Upgrade Hadoop as soon as a fixed version is available.
See https://ossindex.sonatype.org/vulnerability/sonatype-2022-5732

Error:  Failed to execute goal org.sonatype.ossindex.maven:ossindex-maven-plugin:3.2.0:audit (default-cli) on project parquet-io-java: Detected 1 vulnerable components:
Error:    org.apache.hadoop:hadoop-hdfs-client:jar:3.3.4:compile; https://ossindex.sonatype.org/component/pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.3.4?utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
Error:      * 1 vulnerability found (8.6); https://ossindex.sonatype.org/vulnerability/sonatype-2022-5732

Check https://search.maven.org/artifact/org.apache.hadoop/hadoop-hdfs-client for new Hadoop versions.

[ckunki]

Vulnerability is reported for reading XML data while payload for virtual-schema-common-document-files only supports formats json, csv, and parquet.

[redcatbear]

I just checked and 3.3.4 is still the latest version of the hadoop-hdfs-client: See release list.

[redcatbear]

Still no new release of the Hadoop HDFS Client.

[redcatbear]

Still no new release of the Hadoop HDFS Client.

[morazow]

I just checked this, unfortunately, the latest 3.3.5 version still contains the vulnerability:

[ERROR] Failed to execute goal org.sonatype.ossindex.maven:ossindex-maven-plugin:3.2.0:audit (default-cli) on project parquet-io-java: Detected 1 vulnerable components:
[ERROR]   org.apache.hadoop:hadoop-hdfs-client:jar:3.3.5:compile; https://ossindex.sonatype.org/component/pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.3.5?utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
[ERROR]     * 1 vulnerability found (8.6); https://ossindex.sonatype.org/vulnerability/sonatype-2022-5732
[ERROR]