TEZ-4469: Upgrade jettison to 1.5.3 to fix CVE-2022-45685, CVE-2022-45693 (#271) (Bilwa S T reviewed by Laszlo Bodor)

Author: BilwaST

pom.xml

@@ -739,7 +739,7 @@
       <dependency>
         <groupId>org.codehaus.jettison</groupId>
         <artifactId>jettison</artifactId>
-        <version>1.5.1</version>
+        <version>1.5.3</version>
       </dependency>
       <dependency>
         <groupId>com.google.code.findbugs</groupId>

tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java

@@ -111,7 +111,8 @@ public static JSONObject generateSimpleJSONPlan(DAGPlan dagPlan) throws JSONExce
     return dagJson;
   }
 
-  public static JSONObject convertDataEventDependencyInfoToJSON(List<DataEventDependencyInfo> info) {
+  public static JSONObject convertDataEventDependencyInfoToJSON(List<DataEventDependencyInfo> info)
+      throws JSONException {
     return new JSONObject(convertDataEventDependecyInfoToATS(info));
   }
 
@@ -436,7 +437,7 @@ public static Map<String,Object> convertVertexStatsToATSMap(
   }
 
   public static JSONObject convertServicePluginToJSON(
-      ServicePluginInfo servicePluginInfo) {
+      ServicePluginInfo servicePluginInfo) throws JSONException {
     JSONObject jsonObject = new JSONObject(convertServicePluginToATSMap(servicePluginInfo));
     return jsonObject;
   }