Upgrade commons-collections for Security Vulnerabilities[CVE-2015-7501]…

… (apache#2886)

* Upgrade commons-collections for Security Vulnerabilities[CVE-2015-7501]

* fix license

* fix license

distribution/server/src/assemble/LICENSE.bin.txt

@@ -339,7 +339,7 @@ The Apache Software License, Version 2.0
     - commons-beanutils-commons-beanutils-core-1.8.0.jar
     - commons-cli-commons-cli-1.2.jar
     - commons-codec-commons-codec-1.10.jar
-    - commons-collections-commons-collections-3.2.1.jar
+    - commons-collections-commons-collections-3.2.2.jar
     - commons-configuration-commons-configuration-1.6.jar
     - commons-digester-commons-digester-1.8.jar
     - commons-io-commons-io-2.5.jar

pom.xml

@@ -152,6 +152,7 @@ flexible messaging model and an intuitive client API.</description>
     <aspectj.version>1.9.1</aspectj.version>
     <rocksdb.version>5.13.3</rocksdb.version>
     <slf4j.version>1.7.25</slf4j.version>
+    <commons.collections.version>3.2.2</commons.collections.version>
     <log4j2.version>2.10.0</log4j2.version>
     <bouncycastle.version>1.55</bouncycastle.version>
     <jackson.version>2.8.4</jackson.version>
@@ -813,6 +814,12 @@ flexible messaging model and an intuitive client API.</description>
           </exclusion>
         </exclusions>
       </dependency>
+
+      <dependency>
+        <groupId>commons-collections</groupId>
+        <artifactId>commons-collections</artifactId>
+        <version>${commons.collections.version}</version>
+      </dependency>
 
       <dependency>
         <groupId>org.apache.jclouds</groupId>

pulsar-sql/presto-distribution/LICENSE

@@ -243,7 +243,7 @@ The Apache Software License, Version 2.0
     - commons-compress-1.15.jar
     - commons-lang3-3.3.2.jar
     - commons-lang3-3.4.jar
-    - commons-collections-3.2.1.jar
+    - commons-collections-3.2.2.jar
     - commons-configuration-1.6.jar
     - commons-digester-1.8.jar
     - commons-lang-2.4.jar