The pom files are pulling in old versions of Hadoop.

ORC maintains compatibility with old versions of Hadoop by building against them for most of the modules (except for shims and tools). The hadoop dependency should have been provided, but isn't.