From dcfdc25615bf807c0e453db68e61ff195e3730df Mon Sep 17 00:00:00 2001
From: Henning Baldersheim <balder@yahoo-inc.com>
Date: Mon, 31 Oct 2022 19:59:31 +0100
Subject: Use a fresh woodstox-core-6.4.0

---
 vespa-hadoop/pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'vespa-hadoop')

diff --git a/vespa-hadoop/pom.xml b/vespa-hadoop/pom.xml
index c10ad590a53..97d6e83f68a 100644
--- a/vespa-hadoop/pom.xml
+++ b/vespa-hadoop/pom.xml
@@ -18,6 +18,7 @@
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <hadoop.version>3.3.4</hadoop.version>
+        <woodstox.version>6.4.0</woodstox.version>
         <pig.version>0.16.0</pig.version>
     </properties>
 
@@ -29,6 +30,12 @@
                 <artifactId>jetty-util</artifactId>
                 <version>${jetty.version}</version>
             </dependency>
+            <!-- Force fresh woodstox-core without security issue -->
+            <dependency>
+                <groupId>com.fasterxml.woodstox</groupId>
+                <artifactId>woodstox-core</artifactId>
+                <version>${woodstox.version}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 
-- 
cgit v1.2.3