From aa58640d104fdc1a06e05b4ab1385d048700f8c1 Mon Sep 17 00:00:00 2001
From: aramos <angel.ramos@hitachivantara.com>
Date: Thu, 7 Nov 2024 16:32:18 -0500
Subject: [PATCH] 
 [PPP-4893][PPP-5077][PPP-5128][PPP-4407][PPP-4660][PPP-4760][PPP-5043][PPP-4967]
 Karaf upgrade to 4.4.6 and vulnerability fixes

---
 common-dependencies-V1/pom.xml     |  2 +-
 common-fragment-V1/pom.xml         |  2 +-
 common-services-api/pom.xml        |  2 +-
 pom.xml                            |  2 +-
 shims/apache/driver/pom.xml        | 12 +++++++++++-
 shims/apachevanilla/driver/pom.xml |  6 +++---
 shims/cdpdc71/driver/pom.xml       |  6 +++---
 shims/dataproc1421/driver/pom.xml  |  6 +++---
 shims/emr521/driver/pom.xml        |  6 +++---
 shims/emr700/driver/pom.xml        |  6 +++---
 shims/hdi40/driver/pom.xml         | 19 +++++++++++++++----
 shims/hdp30/driver/pom.xml         |  8 ++++----
 shims/mapr60/driver/pom.xml        |  6 +++---
 shims/mapr61/driver/pom.xml        |  6 +++---
 shims/pom.xml                      |  2 +-
 15 files changed, 56 insertions(+), 35 deletions(-)

diff --git a/common-dependencies-V1/pom.xml b/common-dependencies-V1/pom.xml
index 37c123830b4..58bdfbb5f05 100644
--- a/common-dependencies-V1/pom.xml
+++ b/common-dependencies-V1/pom.xml
@@ -46,7 +46,7 @@
 
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.core</artifactId>
+      <artifactId>osgi.core</artifactId>
     </dependency>
     <dependency>
       <groupId>org.apache.orc</groupId>
diff --git a/common-fragment-V1/pom.xml b/common-fragment-V1/pom.xml
index 2cf929e0b20..6fe89ab1250 100644
--- a/common-fragment-V1/pom.xml
+++ b/common-fragment-V1/pom.xml
@@ -149,7 +149,7 @@
     </dependency>
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.core</artifactId>
+      <artifactId>osgi.core</artifactId>
       <scope>provided</scope>
     </dependency>
     <dependency>
diff --git a/common-services-api/pom.xml b/common-services-api/pom.xml
index 9b2e191c9c9..dcd7ae37299 100644
--- a/common-services-api/pom.xml
+++ b/common-services-api/pom.xml
@@ -15,7 +15,7 @@
   <dependencies>
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.core</artifactId>
+      <artifactId>osgi.core</artifactId>
       <scope>provided</scope>
     </dependency>
     <dependency>
diff --git a/pom.xml b/pom.xml
index 0c6a5e297fc..bcf81c12b3e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -46,7 +46,7 @@
     <htrace-core.version>3.1.0-incubating</htrace-core.version>
     <zookeeper.version>3.9.2</zookeeper.version>
     <org.apache.hbase.thirdparty.version>2.1.0</org.apache.hbase.thirdparty.version>
-    <safeyaml.version>1.34.1</safeyaml.version>
+    <snakeyaml.version>2.2</snakeyaml.version>
   </properties>
 
   <dependencyManagement>
diff --git a/shims/apache/driver/pom.xml b/shims/apache/driver/pom.xml
index b7aa4eaa928..5a0b238e99f 100644
--- a/shims/apache/driver/pom.xml
+++ b/shims/apache/driver/pom.xml
@@ -34,6 +34,7 @@
     <zookeeper.version>3.9.2</zookeeper.version>
     <netty.version>4.1.108.Final</netty.version>
     <jetty-runner.version>9.3.20.v20170531</jetty-runner.version>
+    <bouncycastle.version>1.78</bouncycastle.version>
   </properties>
 
   <dependencies>
@@ -250,8 +251,17 @@
           <groupId>com.fasterxml.jackson.core</groupId>
           <artifactId>jackson-databind</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>org.bouncycastle</groupId>
+          <artifactId>bcprov-jdk15on</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcprov-jdk18on</artifactId>
+      <version>${bouncycastle.version}</version>
+    </dependency>
     <dependency>
       <groupId>org.apache.orc</groupId>
       <artifactId>orc-core</artifactId>
@@ -503,7 +513,7 @@
             <resolverFilter>
               <include>
                 *:libthrift,*:aircompressor,*:netty-*,
-                software.amazon.awssdk:*
+                software.amazon.awssdk:*, *:bcprov-jdk18on
               </include>
               <exclude>
                 *:tests:*
diff --git a/shims/apachevanilla/driver/pom.xml b/shims/apachevanilla/driver/pom.xml
index a469ea6a59f..c3850f7a3da 100644
--- a/shims/apachevanilla/driver/pom.xml
+++ b/shims/apachevanilla/driver/pom.xml
@@ -478,9 +478,9 @@
       </exclusions>
     </dependency>
     <dependency>
-      <groupId>org.hitachivantara</groupId>
-      <artifactId>safeyaml</artifactId>
-      <version>${safeyaml.version}</version>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>${snakeyaml.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.orc</groupId>
diff --git a/shims/cdpdc71/driver/pom.xml b/shims/cdpdc71/driver/pom.xml
index 9543e8f614d..0351e0f8a50 100644
--- a/shims/cdpdc71/driver/pom.xml
+++ b/shims/cdpdc71/driver/pom.xml
@@ -358,9 +358,9 @@
       <version>${parquet.version}</version>
     </dependency>
     <dependency>
-      <groupId>org.hitachivantara</groupId>
-      <artifactId>safeyaml</artifactId>
-      <version>${safeyaml.version}</version>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>${snakeyaml.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.orc</groupId>
diff --git a/shims/dataproc1421/driver/pom.xml b/shims/dataproc1421/driver/pom.xml
index 386ffaed44d..c529a9f9260 100755
--- a/shims/dataproc1421/driver/pom.xml
+++ b/shims/dataproc1421/driver/pom.xml
@@ -249,9 +249,9 @@
       </exclusions>
     </dependency>
     <dependency>
-      <groupId>org.hitachivantara</groupId>
-      <artifactId>safeyaml</artifactId>
-      <version>${safeyaml.version}</version>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>${snakeyaml.version}</version>
     </dependency>
 	  <dependency>
       <groupId>org.apache.hive</groupId>
diff --git a/shims/emr521/driver/pom.xml b/shims/emr521/driver/pom.xml
index 07f51c09903..c71e05e5ef5 100644
--- a/shims/emr521/driver/pom.xml
+++ b/shims/emr521/driver/pom.xml
@@ -229,9 +229,9 @@
       </exclusions>
     </dependency>
     <dependency>
-      <groupId>org.hitachivantara</groupId>
-      <artifactId>safeyaml</artifactId>
-      <version>${safeyaml.version}</version>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>${snakeyaml.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.hadoop</groupId>
diff --git a/shims/emr700/driver/pom.xml b/shims/emr700/driver/pom.xml
index 1972552e5f0..3625f5bf094 100644
--- a/shims/emr700/driver/pom.xml
+++ b/shims/emr700/driver/pom.xml
@@ -484,9 +484,9 @@
       </exclusions>
     </dependency>
     <dependency>
-      <groupId>org.hitachivantara</groupId>
-      <artifactId>safeyaml</artifactId>
-      <version>${safeyaml.version}</version>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>${snakeyaml.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.hadoop</groupId>
diff --git a/shims/hdi40/driver/pom.xml b/shims/hdi40/driver/pom.xml
index 84aa7af1f40..16c6e1fec68 100644
--- a/shims/hdi40/driver/pom.xml
+++ b/shims/hdi40/driver/pom.xml
@@ -31,6 +31,7 @@
     <jython.version>2.5.3</jython.version>
     <commons-configuration2.version>2.10.1</commons-configuration2.version>
     <netty.version>4.1.108.Final</netty.version>
+    <bouncycastle.version>1.78</bouncycastle.version>
   </properties>
 
   <dependencyManagement>
@@ -224,8 +225,17 @@
           <groupId>org.slf4j</groupId>
           <artifactId>slf4j-api</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>org.bouncycastle</groupId>
+          <artifactId>bcpkix-jdk15on</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcpkix-jdk18on</artifactId>
+      <version>${bouncycastle.version}</version>
+    </dependency>
     <dependency>
       <groupId>org.apache.hive</groupId>
       <artifactId>hive-service</artifactId>
@@ -258,9 +268,9 @@
       </exclusions>
     </dependency>
     <dependency>
-      <groupId>org.hitachivantara</groupId>
-      <artifactId>safeyaml</artifactId>
-      <version>${safeyaml.version}</version>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>${snakeyaml.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.parquet</groupId>
@@ -581,7 +591,8 @@
             <resolverFilter>
               <include>
                 <!--Needed for Pig-->
-                *:antlr-runtime,*:automaton,*:parquet-pig, *:pig, *:sqoop,*:joda-time,*:jython,*:aircompressor,*:netty-*
+                *:antlr-runtime,*:automaton,*:parquet-pig, *:pig, *:sqoop,*:joda-time,*:jython,*:aircompressor,*:netty-*,
+                *:bcprov-jdk18on
               </include>
               <transitive>false</transitive>
             </resolverFilter>
diff --git a/shims/hdp30/driver/pom.xml b/shims/hdp30/driver/pom.xml
index bbb71726686..5e717b5a935 100644
--- a/shims/hdp30/driver/pom.xml
+++ b/shims/hdp30/driver/pom.xml
@@ -50,7 +50,7 @@
     <!-- Note the difference between \lib and \lib\client -->
     <jetty.lib-folder.version>9.3.20.v20170531</jetty.lib-folder.version>
     <jetty.client-folder.version>9.3.19.v20170502</jetty.client-folder.version>
-    <safeyaml.version>1.34.1</safeyaml.version>
+    <snakeyaml.version>2.2</snakeyaml.version>
   </properties>
 
   <dependencyManagement>
@@ -310,9 +310,9 @@
       </exclusions>
     </dependency>
     <dependency>
-      <groupId>org.hitachivantara</groupId>
-      <artifactId>safeyaml</artifactId>
-      <version>${safeyaml.version}</version>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>${snakeyaml.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.hive</groupId>
diff --git a/shims/mapr60/driver/pom.xml b/shims/mapr60/driver/pom.xml
index f85708db53a..ac3f6424631 100644
--- a/shims/mapr60/driver/pom.xml
+++ b/shims/mapr60/driver/pom.xml
@@ -43,9 +43,9 @@
       </exclusions>
     </dependency>
     <dependency>
-      <groupId>org.hitachivantara</groupId>
-      <artifactId>safeyaml</artifactId>
-      <version>${safeyaml.version}</version>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>${snakeyaml.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.felix</groupId>
diff --git a/shims/mapr61/driver/pom.xml b/shims/mapr61/driver/pom.xml
index 3546a945a04..7141aad9e75 100644
--- a/shims/mapr61/driver/pom.xml
+++ b/shims/mapr61/driver/pom.xml
@@ -43,9 +43,9 @@
       </exclusions>
     </dependency>
     <dependency>
-      <groupId>org.hitachivantara</groupId>
-      <artifactId>safeyaml</artifactId>
-      <version>${safeyaml.version}</version>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>${snakeyaml.version}</version>
     </dependency>
     <dependency>
       <groupId>org.apache.felix</groupId>
diff --git a/shims/pom.xml b/shims/pom.xml
index 47922099b27..c35fd81d821 100644
--- a/shims/pom.xml
+++ b/shims/pom.xml
@@ -87,7 +87,7 @@
     </dependency>
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>org.osgi.core</artifactId>
+      <artifactId>osgi.core</artifactId>
       <scope>provided</scope>
     </dependency>
     <dependency>