Oozie
HDP 2.5.3 provides Oozie 4.2.0 and no additional Apache patches.
HDP 2.5.0 provided Oozie 4.2.0 and the following Apache patches:
OOZIE-2289: hive-jdbc dependency in core/pom.xml should be compile.
OOZIE-2290: Oozie db version update should happen after all DDL tweak.
OOZIE-2291: Hive2 workflow.xml.security should have "cred" in action tag instead of "hive2" tag.
OOZIE-2492: JSON security issue in js code.