[ 
https://issues.apache.org/jira/browse/HADOOP-19791?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18055193#comment-18055193
 ] 

Steve Loughran commented on HADOOP-19791:
-----------------------------------------

internal protobuf and guava is via hadoop-thirdparty; the versions there are 
listed in the changelog
https://github.com/apache/hadoop-thirdparty/commits/release-1.5.0-RC0

raise a PR against that module, one per library upgrade. 

> Upgrade Google Cloud Storage to remediate CVEs
> ----------------------------------------------
>
>                 Key: HADOOP-19791
>                 URL: https://issues.apache.org/jira/browse/HADOOP-19791
>             Project: Hadoop Common
>          Issue Type: Task
>          Components: cloud-storage, fs/gcs, hadoop-thirdparty
>    Affects Versions: 3.4.2
>            Reporter: Shubham Kalloli
>            Priority: Major
>         Attachments: report.html
>
>
> Upgrading Google Cloud Storage from 2.52.0 to 2.62.0 to remediate 
> CVE-2025-55163
> Updating Guava and Protobuf to prevent conflicts



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to