Andrew Story created HADOOP-18858:
-------------------------------------
Summary: Upgrade guava due to CVE
Key: HADOOP-18858
URL: https://issues.apache.org/jira/browse/HADOOP-18858
Project: Hadoop Common
Issue Type: Bug
Components: hadoop-thirdparty
Affects Versions: 3.3.6
Reporter: Andrew Story
Update guava to 32.0.1 or higher due to CVE:
[https://nvd.nist.gov/vuln/detail/CVE-2023-2976]
hadoop-shaded-guava 1.1.1 us currently using 30.1.1-jre per security scanning
tools
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]