Upgrade httpclient from 4.5.5 to 4.5.13 (apache#2793)

Upgrade httpclient from 4.5.5 to 4.5.13 (on gradle dependencies it was already on 4.5.13) ### Motivation Resolve security vulnerability, see GHSA-7r82-7xv7-xcpj
sijie · Oct 15, 2021 · 0465052 · 0465052
1 parent 594a056
commit 0465052
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 7 deletions.
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
@@ -286,8 +286,8 @@ Apache Software License, Version 2.
 - lib/com.google.errorprone-error_prone_annotations-2.4.0.jar [36]
 - lib/org.apache.yetus-audience-annotations-0.5.0.jar [37]
 - lib/org.jctools-jctools-core-2.1.2.jar [38]
-- lib/org.apache.httpcomponents-httpclient-4.5.5.jar [39]
-- lib/org.apache.httpcomponents-httpcore-4.4.9.jar [40]
+- lib/org.apache.httpcomponents-httpclient-4.5.13.jar [39]
+- lib/org.apache.httpcomponents-httpcore-4.4.13.jar [40]
 - lib/org.apache.thrift-libthrift-0.14.2.jar [41]
 - lib/com.google.android-annotations-4.1.1.4.jar [42]
 - lib/com.google.http-client-google-http-client-1.34.0.jar [43]

diff --git a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
@@ -265,8 +265,8 @@ Apache Software License, Version 2.
 - lib/com.google.errorprone-error_prone_annotations-2.4.0.jar [35]
 - lib/org.apache.yetus-audience-annotations-0.5.0.jar [36]
 - lib/org.jctools-jctools-core-2.1.2.jar [37]
-- lib/org.apache.httpcomponents-httpclient-4.5.5.jar [38]
-- lib/org.apache.httpcomponents-httpcore-4.4.9.jar [39]
+- lib/org.apache.httpcomponents-httpclient-4.5.13.jar [38]
+- lib/org.apache.httpcomponents-httpcore-4.4.13.jar [39]
 - lib/org.apache.thrift-libthrift-0.14.2.jar [40]
 - lib/com.google.android-annotations-4.1.1.4.jar [41]
 - lib/com.google.auto.value-auto-value-annotations-1.7.jar [42]

diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
@@ -286,8 +286,8 @@ Apache Software License, Version 2.
 - lib/com.google.errorprone-error_prone_annotations-2.4.0.jar [36]
 - lib/org.apache.yetus-audience-annotations-0.5.0.jar [37]
 - lib/org.jctools-jctools-core-2.1.2.jar [38]
-- lib/org.apache.httpcomponents-httpclient-4.5.5.jar [39]
-- lib/org.apache.httpcomponents-httpcore-4.4.9.jar [40]
+- lib/org.apache.httpcomponents-httpclient-4.5.13.jar [39]
+- lib/org.apache.httpcomponents-httpcore-4.4.13.jar [40]
 - lib/org.apache.thrift-libthrift-0.14.2.jar [41]
 - lib/com.google.android-annotations-4.1.1.4.jar [42]
 - lib/com.google.http-client-google-http-client-1.34.0.jar [43]

diff --git a/pom.xml b/pom.xml
@@ -153,7 +153,7 @@
     <powermock.version>2.0.2</powermock.version>
     <prometheus.version>0.8.1</prometheus.version>
     <datasketches.version>0.8.3</datasketches.version>
-    <httpclient.version>4.5.5</httpclient.version>
+    <httpclient.version>4.5.13</httpclient.version>
     <protobuf.version>3.14.0</protobuf.version>
     <protoc3.version>3.14.0</protoc3.version>
     <protoc-gen-grpc-java.version>${grpc.version}</protoc-gen-grpc-java.version>