Upgrade accumulo to 1.10.1 to fix CVE-2020-17533

[namya28]

Description

This PR is for fixing the security vulnerability for accumulo. The version has been upgraded to 1.10.1 from the version 1.7.4 as the version 1.7.4 had a security vulnerability. This fixes CVE-2020-17533.

Motivation and Context

Impact

Test Plan

Contributor checklist

• Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
• PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
• Documented new properties (with its default value), SQL syntax, functions, or other functionality.
• If release notes are required, they follow the release notes guidelines.
• Adequate tests were added if applicable.
• CI passed.

Release Notes

Please follow release notes guidelines and fill in the release notes below.

== RELEASE NOTES ==

Security Changes

* Upgrade the accumulo version to 1.10.1 in response to `
CVE-2020-17533 <https://github.com/advisories/GHSA-grc3-8q8m-4j7c>`_. :pr:`24438`

[steveburnett]

Thanks for the release note! Suggest adding the CVE that prompted the work, following the example in Phrasing in the Release Notes Guidelines.

== RELEASE NOTES ==

Security Changes

* Upgrade the accumulo-core version to 1.10.1 in response to `
CVE-2020-17533 <hhttps://github.com/advisories/GHSA-grc3-8q8m-4j7c>`_. :pr:`24438`

[imjalpreet]

@namya28 Thanks for the fix! Could you confirm whether the CVE actually affects accumulo-core? From what I see, CVE-2020-17533 specifically impacts accumulo-master. In Presto, it might be present in accumulo-minicluster due to its dependency on accumulo-master, but I don’t believe it is directly related to accumulo-core.

If that’s the case, we should update the PR title and commit messages accordingly. Let me know if I missed anything.

[imjalpreet]

@namya28 Thanks, I think below commit message would be better

Upgrade Accumulo to 1.10.1 to fix CVE-2020-17533

Upgrade the Accumulo version from 1.7.4 to 1.10.1 to address a security vulnerability (CVE-2020-17533). The affected library, accumulo-master, is a transitive dependency in Presto, coming from accumulo-minicluster.

The commit description will give more context to the fix.

[namya28]

@namya28 Thanks, I think below commit message would be better

Upgrade Accumulo to 1.10.1 to fix CVE-2020-17533

Upgrade the Accumulo version from 1.7.4 to 1.10.1 to address a security vulnerability (CVE-2020-17533). The affected library, accumulo-master, is a transitive dependency in Presto, coming from accumulo-minicluster.

The commit description will give more context to the fix.

Thanks for the suggestion @imjalpreet . I have made the changes , rebased and pushed my changes again.

[imjalpreet]

LGTM, thanks!

[imjalpreet]

@tdcmeehan another PR which is ready for final review. Please take a look whenever you get a chance, thanks!