[BugFix] cleanup broker CVEs (#60908)

Signed-off-by: Kevin Cai <kevin.cai@celerdata.com>

fs_brokers/apache_hdfs_broker/src/pom.xml

@@ -40,15 +40,16 @@ under the License.
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <maven.compiler.source>1.8</maven.compiler.source>
         <maven.compiler.target>1.8</maven.compiler.target>
-        <hadoop.version>3.4.0</hadoop.version>
+        <hadoop.version>3.4.1</hadoop.version>
         <guava.version>32.0.1-jre</guava.version>
         <zookeeper.version>3.9.3</zookeeper.version>
-        <protobuf.version>3.16.3</protobuf.version>
+        <protobuf.version>3.25.5</protobuf.version>
         <thrift.version>0.14.1</thrift.version>
-        <tomcat.version>9.0.99</tomcat.version>
+        <tomcat.version>9.0.106</tomcat.version>
         <log4j.version>2.17.1</log4j.version>
         <jackson.version>2.18.3</jackson.version>
         <avro.version>1.11.4</avro.version>
+        <jetty.version>9.4.57.v20241219</jetty.version>
     </properties>
 
     <profiles>
@@ -140,6 +141,12 @@ under the License.
                 <version>3.2.2</version>
             </dependency>
 
+            <dependency>
+                <groupId>commons-beanutils</groupId>
+                <artifactId>commons-beanutils</artifactId>
+                <version>1.11.0</version>
+            </dependency>
+
             <!-- https://mvnrepository.com/artifact/commons-configuration/commons-configuration -->
             <dependency>
                 <groupId>commons-configuration</groupId>
@@ -158,7 +165,7 @@ under the License.
             <dependency>
                 <groupId>commons-io</groupId>
                 <artifactId>commons-io</artifactId>
-                <version>2.7</version>
+                <version>2.14.0</version>
             </dependency>
 
             <!-- https://mvnrepository.com/artifact/commons-lang/commons-lang -->
@@ -196,6 +203,12 @@ under the License.
                 <version>${hadoop.version}</version>
             </dependency>
 
+            <dependency>
+                <groupId>io.netty</groupId>
+                <artifactId>netty-handler</artifactId>
+                <version>4.1.118.Final</version>
+            </dependency>
+
             <!-- https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-auth -->
             <dependency>
                 <groupId>org.apache.hadoop</groupId>
@@ -214,8 +227,21 @@ under the License.
                 <groupId>org.apache.zookeeper</groupId>
                 <artifactId>zookeeper</artifactId>
                 <version>${zookeeper.version}</version>
+                <exclusions>
+                    <exclusion>
+                        <artifactId>io.netty</artifactId>
+                        <groupId>netty-handler</groupId>
+                    </exclusion>
+                </exclusions>
             </dependency>
 
+            <dependency>
+                <groupId>org.eclipse.jetty</groupId>
+                <artifactId>jetty-server</artifactId>
+                <version>${jetty.version}</version>
+            </dependency>
+
+
             <!-- https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-common -->
             <dependency>
                 <groupId>org.apache.hadoop</groupId>
@@ -226,6 +252,10 @@ under the License.
                         <artifactId>avro</artifactId>
                         <groupId>org.apache.avro</groupId>
                     </exclusion>
+                    <exclusion>
+                        <groupId>org.eclipse.jetty</groupId>
+                        <artifactId>jetty-server</artifactId>
+                    </exclusion>
                 </exclusions>
             </dependency>