[ 
https://issues.apache.org/jira/browse/HADOOP-16211?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16854992#comment-16854992
 ] 

Gabor Bota commented on HADOOP-16211:
-------------------------------------

006: adding {{@Nullable}} to {{asXmlDocument}}'s property 
and
fix  {{NP_PARAMETER_MUST_BE_NONNULL_BUT_MARKED_AS_NULLABLE}} in 
\{{org.apache.hadoop.conf.Configuration}} with 

 
{code:xml}
  <!-- propertyName is checked with isNullOrEmpty (fix after guava 27) -->
  <Match>
    <Class name="org.apache.hadoop.conf.Configuration"/>
    <Method name="asXmlDocument"/>
    <Bug pattern="NP_PARAMETER_MUST_BE_NONNULL_BUT_MARKED_AS_NULLABLE"/>
  </Match>
{code}

> Update guava to 27.0-jre in hadoop-project branch-3.2
> -----------------------------------------------------
>
>                 Key: HADOOP-16211
>                 URL: https://issues.apache.org/jira/browse/HADOOP-16211
>             Project: Hadoop Common
>          Issue Type: Sub-task
>    Affects Versions: 3.2.0
>            Reporter: Gabor Bota
>            Assignee: Gabor Bota
>            Priority: Major
>         Attachments: HADOOP-16211-branch-3.2.001.patch, 
> HADOOP-16211-branch-3.2.002.patch, HADOOP-16211-branch-3.2.003.patch, 
> HADOOP-16211-branch-3.2.004.patch, HADOOP-16211-branch-3.2.005.patch, 
> HADOOP-16211-branch-3.2.006.patch
>
>
> com.google.guava:guava should be upgraded to 27.0-jre due to new CVE's found 
> CVE-2018-10237.
> This is a sub-task for branch-3.2 from HADOOP-15960 to track issues on that 
> particular branch. 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to