This is an automated email from the ASF dual-hosted git repository.
stevel pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/hadoop-thirdparty.git
The following commit(s) were added to refs/heads/trunk by this push:
new 52c38fe HADOOP-18843. Guava version 32.0.1 bump to fix CVE-2023-2976
(#23)
52c38fe is described below
commit 52c38fefec0d7835a0ef3b79d5c5af00622ac4b0
Author: fredbalves86 <77003660+fredbalve...@users.noreply.github.com>
AuthorDate: Fri Nov 3 12:18:06 2023 +0000
HADOOP-18843. Guava version 32.0.1 bump to fix CVE-2023-2976 (#23)
Contributed by Frederico Alves
---
LICENSE-binary | 2 +-
pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index bbc403a..1d24c48 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -205,7 +205,7 @@
This project bundles some components that are also licensed under the Apache
License Version 2.0:
-com.google.guava:guava:jar:31.1-jre
+com.google.guava:guava:jar:32.0.1-jre
com.google.j2objc:j2objc-annotations:1.3
com.google.errorprone:error_prone_annotations:2.5.1
org.apache.avro:avro:1.11.3
diff --git a/pom.xml b/pom.xml
index f950e04..9d39c42 100644
--- a/pom.xml
+++ b/pom.xml
@@ -95,7 +95,7 @@
<shaded.prefix>org.apache.hadoop.thirdparty</shaded.prefix>
<protobuf.shade.prefix>${shaded.prefix}.protobuf</protobuf.shade.prefix>
<protobuf_3_7.version>3.7.1</protobuf_3_7.version>
- <guava.version>31.1-jre</guava.version>
+ <guava.version>32.0.1-jre</guava.version>
<avro.version>1.11.3</avro.version>
<!-- maven plugin versions -->
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-commits-h...@hadoop.apache.org
