[
https://issues.apache.org/jira/browse/HDFS-17377?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17816588#comment-17816588
]
Steve Loughran commented on HDFS-17377:
---------------------------------------
[~prathapsagars] thank you very much for doing this against 3.4.0. we've
actually just done a release of the hadoop-third-party jar for the forthcoming
3.4.0 RC2 (this week!), with a goal of a future backport to 3.3.9.
it's list of artifacts is
https://github.com/apache/hadoop-thirdparty/blob/trunk/LICENSE-binary#L205
{code}
com.google.guava:guava:jar:32.0.1-jre
com.google.j2objc:j2objc-annotations:1.3
com.google.errorprone:error_prone_annotations:2.5.1
org.apache.avro:avro:1.11.3
com.google.protobuf:protobuf-java:3.21.12
org.checkerframework:checker-qual:jar:3.8.0
{code}
Regarding others, this is an eternal source of pain; i've tried to document it
before: https://steveloughran.blogspot.com/2022/08/transitive-issues.html
we have (especially pjfanning has, to give credit) put a lot of effort to try
and upgrade things without breaking downstream applications. We've had to do
things with reflection, build our own releases of dependencies to move off
jackson 1.x and more. I also think I'd never to want to use Guava in a project
ever again. We've actually been re-implenting bits of it (Preconditions, sets)
or wrapping it (rate limiting) to isolate it better.
{code}
./share/hadoop/tools/lib/wildfly-openssl-1.1.3.Final.jar
./share/hadoop/tools/lib/kafka-clients-2.8.2.jar
./share/hadoop/tools/lib/ini4j-0.5.4.jar
./share/hadoop/tools/lib/aliyun-java-sdk-kms-2.11.0.jar
./share/hadoop/tools/lib/aliyun-sdk-oss-3.13.2.jar
./share/hadoop/tools/lib/opentracing-api-0.33.0.jar
./share/hadoop/tools/lib/hadoop-federation-balance-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-minicluster-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/azure-data-lake-store-sdk-2.3.9.jar
./share/hadoop/tools/lib/jdk.tools-1.8.jar
./share/hadoop/tools/lib/hadoop-rumen-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-datajoin-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/aliyun-java-sdk-ram-3.1.0.jar
./share/hadoop/tools/lib/hadoop-dynamometer-blockgen-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/azure-keyvault-core-1.0.0.jar
./share/hadoop/tools/lib/junit-4.13.2.jar
./share/hadoop/tools/lib/hadoop-sls-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-resourceestimator-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/opentracing-noop-0.33.0.jar
./share/hadoop/tools/lib/hadoop-archive-logs-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/org.jacoco.agent-0.8.5-runtime.jar
./share/hadoop/tools/lib/hadoop-fs2img-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-gridmix-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/lz4-java-1.7.1.jar
./share/hadoop/tools/lib/hadoop-distcp-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-azure-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-dynamometer-infra-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-archives-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/azure-storage-7.0.1.jar
./share/hadoop/tools/lib/hamcrest-core-1.3.jar
./share/hadoop/tools/lib/bundle-2.23.19.jar
./share/hadoop/tools/lib/hadoop-streaming-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-azure-datalake-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-client-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/opentracing-util-0.33.0.jar
./share/hadoop/tools/lib/hadoop-kafka-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/aliyun-java-sdk-core-4.5.10.jar
./share/hadoop/tools/lib/hadoop-aliyun-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/zstd-jni-1.4.9-1.jar
./share/hadoop/tools/lib/jdom2-2.0.6.1.jar
./share/hadoop/tools/lib/ojalgo-43.0.jar
./share/hadoop/tools/lib/hadoop-extras-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-aws-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/lib/hadoop-dynamometer-workload-3.4.1-SNAPSHOT.jar
./share/hadoop/tools/sources/hadoop-extras-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-federation-balance-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-streaming-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-archives-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-distcp-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-streaming-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-distcp-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-dynamometer-infra-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-dynamometer-workload-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-rumen-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-sls-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-rumen-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-dynamometer-blockgen-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-gridmix-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-federation-balance-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-resourceestimator-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-archive-logs-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-datajoin-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-archive-logs-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-dynamometer-workload-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-gridmix-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-datajoin-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-dynamometer-infra-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-resourceestimator-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-dynamometer-blockgen-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/tools/sources/hadoop-archives-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-sls-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/tools/sources/hadoop-extras-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/csi/hadoop-yarn-csi-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/csi/lib/annotations-4.1.1.4.jar
./share/hadoop/yarn/csi/lib/animal-sniffer-annotations-1.21.jar
./share/hadoop/yarn/csi/lib/grpc-core-1.53.0.jar
./share/hadoop/yarn/csi/lib/grpc-protobuf-1.53.0.jar
./share/hadoop/yarn/csi/lib/grpc-protobuf-lite-1.53.0.jar
./share/hadoop/yarn/csi/lib/javax.annotation-api-1.3.2.jar
./share/hadoop/yarn/csi/lib/perfmark-api-0.25.0.jar
./share/hadoop/yarn/csi/lib/error_prone_annotations-2.14.0.jar
./share/hadoop/yarn/csi/lib/grpc-context-1.53.0.jar
./share/hadoop/yarn/csi/lib/grpc-api-1.53.0.jar
./share/hadoop/yarn/csi/lib/grpc-netty-1.53.0.jar
./share/hadoop/yarn/csi/lib/grpc-stub-1.53.0.jar
./share/hadoop/yarn/csi/lib/proto-google-common-protos-2.9.0.jar
./share/hadoop/yarn/hadoop-yarn-server-timeline-pluginstorage-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-api-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/test/hadoop-yarn-server-tests-3.4.1-SNAPSHOT-tests.jar
./share/hadoop/yarn/hadoop-yarn-client-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-server-common-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-server-router-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/timelineservice/test/hadoop-yarn-server-timelineservice-hbase-tests-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/timelineservice/hadoop-yarn-server-timelineservice-hbase-common-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/timelineservice/hadoop-yarn-server-timelineservice-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/timelineservice/hadoop-yarn-server-timelineservice-hbase-coprocessor-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/timelineservice/hadoop-yarn-server-timelineservice-hbase-client-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/timelineservice/lib/commons-csv-1.9.0.jar
./share/hadoop/yarn/timelineservice/lib/azure-cosmosdb-gateway-2.4.5.jar
./share/hadoop/yarn/timelineservice/lib/java-uuid-generator-3.1.4.jar
./share/hadoop/yarn/timelineservice/lib/hbase-client-1.7.1.jar
./share/hadoop/yarn/timelineservice/lib/guava-12.0.1.jar
./share/hadoop/yarn/timelineservice/lib/hbase-annotations-1.7.1.jar
./share/hadoop/yarn/timelineservice/lib/hbase-shaded-gson-3.0.0.jar
./share/hadoop/yarn/timelineservice/lib/rxjava-extras-0.8.0.17.jar
./share/hadoop/yarn/timelineservice/lib/hbase-common-1.7.1.jar
./share/hadoop/yarn/timelineservice/lib/azure-cosmosdb-commons-2.4.5.jar
./share/hadoop/yarn/timelineservice/lib/commons-validator-1.6.jar
./share/hadoop/yarn/timelineservice/lib/commons-collections4-4.2.jar
./share/hadoop/yarn/timelineservice/lib/rxjava-1.3.8.jar
./share/hadoop/yarn/timelineservice/lib/joni-2.1.2.jar
./share/hadoop/yarn/timelineservice/lib/rxnetty-0.4.20.jar
./share/hadoop/yarn/timelineservice/lib/metrics-core-2.2.0.jar
./share/hadoop/yarn/timelineservice/lib/jcodings-1.0.13.jar
./share/hadoop/yarn/timelineservice/lib/azure-cosmosdb-2.4.5.jar
./share/hadoop/yarn/timelineservice/lib/azure-cosmosdb-direct-2.4.5.jar
./share/hadoop/yarn/timelineservice/lib/rxjava-string-1.1.1.jar
./share/hadoop/yarn/timelineservice/lib/hbase-protocol-1.7.1.jar
./share/hadoop/yarn/timelineservice/lib/guice-4.0.jar
./share/hadoop/yarn/timelineservice/lib/htrace-core-3.1.0-incubating.jar
./share/hadoop/yarn/timelineservice/lib/commons-digester-1.8.1.jar
./share/hadoop/yarn/timelineservice/hadoop-yarn-server-timelineservice-documentstore-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-server-tests-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-applications-mawo-core-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-server-resourcemanager-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-server-globalpolicygenerator-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-registry-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/lib/javax.websocket-api-1.0.jar
./share/hadoop/yarn/lib/guice-servlet-4.2.3.jar
./share/hadoop/yarn/lib/jakarta.xml.bind-api-2.3.2.jar
./share/hadoop/yarn/lib/jackson-jaxrs-base-2.12.7.jar
./share/hadoop/yarn/lib/websocket-servlet-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/aopalliance-1.0.jar
./share/hadoop/yarn/lib/websocket-api-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/snakeyaml-2.0.jar
./share/hadoop/yarn/lib/guice-4.2.3.jar
./share/hadoop/yarn/lib/codemodel-2.6.jar
./share/hadoop/yarn/lib/asm-commons-9.6.jar
./share/hadoop/yarn/lib/jackson-jaxrs-json-provider-2.12.7.jar
./share/hadoop/yarn/lib/geronimo-jcache_1.0_spec-1.0-alpha-1.jar
./share/hadoop/yarn/lib/objenesis-2.6.jar
./share/hadoop/yarn/lib/websocket-common-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/protobuf-java-2.5.0.jar
./share/hadoop/yarn/lib/asm-tree-9.6.jar
./share/hadoop/yarn/lib/fst-2.50.jar
./share/hadoop/yarn/lib/jetty-annotations-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/mssql-jdbc-6.2.1.jre7.jar
./share/hadoop/yarn/lib/websocket-client-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/jsonschema2pojo-core-1.0.2.jar
./share/hadoop/yarn/lib/jetty-plus-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/jersey-client-1.19.4.jar
./share/hadoop/yarn/lib/javax.websocket-client-api-1.0.jar
./share/hadoop/yarn/lib/bcutil-jdk15on-1.70.jar
./share/hadoop/yarn/lib/jetty-jndi-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/javax-websocket-server-impl-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/ehcache-3.3.1.jar
./share/hadoop/yarn/lib/bcpkix-jdk15on-1.70.jar
./share/hadoop/yarn/lib/commons-lang-2.6.jar
./share/hadoop/yarn/lib/jna-5.2.0.jar
./share/hadoop/yarn/lib/websocket-server-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/javax-websocket-client-impl-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/jersey-guice-1.19.4.jar
./share/hadoop/yarn/lib/jackson-module-jaxb-annotations-2.12.7.jar
./share/hadoop/yarn/lib/javax.inject-1.jar
./share/hadoop/yarn/lib/jetty-client-9.4.53.v20231009.jar
./share/hadoop/yarn/lib/swagger-annotations-1.5.4.jar
./share/hadoop/yarn/sources/hadoop-yarn-services-api-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-client-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-applications-unmanaged-am-launcher-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-common-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-services-core-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-nodemanager-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-common-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-tests-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-common-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-nodemanager-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-api-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-applicationhistoryservice-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-client-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-applications-distributedshell-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-resourcemanager-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-resourcemanager-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-tests-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-applicationhistoryservice-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-applications-distributedshell-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-api-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-web-proxy-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-web-proxy-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-server-common-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-services-api-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-services-core-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/sources/hadoop-yarn-applications-unmanaged-am-launcher-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/yarn/hadoop-yarn-services-api-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-applications-distributedshell-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-applications-unmanaged-am-launcher-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-services-core-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-server-sharedcachemanager-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-server-nodemanager-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-common-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-server-applicationhistoryservice-3.4.1-SNAPSHOT.jar
./share/hadoop/yarn/hadoop-yarn-server-web-proxy-3.4.1-SNAPSHOT.jar
./share/hadoop/common/hadoop-common-3.4.1-SNAPSHOT.jar
./share/hadoop/common/hadoop-kms-3.4.1-SNAPSHOT.jar
./share/hadoop/common/lib/jaxb-impl-2.2.3-1.jar
./share/hadoop/common/lib/jetty-webapp-9.4.53.v20231009.jar
./share/hadoop/common/lib/curator-client-5.2.0.jar
./share/hadoop/common/lib/netty-handler-4.1.100.Final.jar
./share/hadoop/common/lib/nimbus-jose-jwt-9.31.jar
./share/hadoop/common/lib/kerby-pkix-2.0.3.jar
./share/hadoop/common/lib/jackson-core-2.12.7.jar
./share/hadoop/common/lib/netty-all-4.1.100.Final.jar
./share/hadoop/common/lib/netty-codec-redis-4.1.100.Final.jar
./share/hadoop/common/lib/commons-configuration2-2.8.0.jar
./share/hadoop/common/lib/hadoop-shaded-guava-1.2.0.jar
./share/hadoop/common/lib/kerb-server-2.0.3.jar
./share/hadoop/common/lib/zookeeper-jute-3.8.3.jar
./share/hadoop/common/lib/slf4j-log4j12-1.7.30.jar
./share/hadoop/common/lib/netty-codec-dns-4.1.100.Final.jar
./share/hadoop/common/lib/jetty-util-ajax-9.4.53.v20231009.jar
./share/hadoop/common/lib/netty-codec-stomp-4.1.100.Final.jar
./share/hadoop/common/lib/kerb-identity-2.0.3.jar
./share/hadoop/common/lib/failureaccess-1.0.jar
./share/hadoop/common/lib/checker-qual-2.5.2.jar
./share/hadoop/common/lib/jersey-servlet-1.19.4.jar
./share/hadoop/common/lib/netty-transport-native-epoll-4.1.100.Final-linux-aarch_64.jar
./share/hadoop/common/lib/kerby-asn1-2.0.3.jar
./share/hadoop/common/lib/commons-cli-1.5.0.jar
./share/hadoop/common/lib/woodstox-core-5.4.0.jar
./share/hadoop/common/lib/dnsjava-3.4.0.jar
./share/hadoop/common/lib/curator-framework-5.2.0.jar
./share/hadoop/common/lib/commons-compress-1.24.0.jar
./share/hadoop/common/lib/httpcore-4.4.13.jar
./share/hadoop/common/lib/slf4j-api-1.7.30.jar
./share/hadoop/common/lib/kerby-config-2.0.3.jar
./share/hadoop/common/lib/commons-logging-1.1.3.jar
./share/hadoop/common/lib/netty-codec-smtp-4.1.100.Final.jar
./share/hadoop/common/lib/kerb-util-2.0.3.jar
./share/hadoop/common/lib/netty-codec-mqtt-4.1.100.Final.jar
./share/hadoop/common/lib/commons-io-2.14.0.jar
./share/hadoop/common/lib/jersey-json-1.20.jar
./share/hadoop/common/lib/commons-net-3.9.0.jar
./share/hadoop/common/lib/javax.servlet-api-3.1.0.jar
./share/hadoop/common/lib/jersey-server-1.19.4.jar
./share/hadoop/common/lib/jline-3.9.0.jar
./share/hadoop/common/lib/log4j-1.2.17.jar
./share/hadoop/common/lib/jetty-server-9.4.53.v20231009.jar
./share/hadoop/common/lib/jetty-util-9.4.53.v20231009.jar
./share/hadoop/common/lib/netty-transport-rxtx-4.1.100.Final.jar
./share/hadoop/common/lib/guava-27.0-jre.jar
./share/hadoop/common/lib/netty-codec-http-4.1.100.Final.jar
./share/hadoop/common/lib/netty-buffer-4.1.100.Final.jar
./share/hadoop/common/lib/gson-2.9.0.jar
./share/hadoop/common/lib/jcip-annotations-1.0-1.jar
./share/hadoop/common/lib/zookeeper-3.8.3.jar
./share/hadoop/common/lib/netty-common-4.1.100.Final.jar
./share/hadoop/common/lib/jetty-io-9.4.53.v20231009.jar
./share/hadoop/common/lib/jsr311-api-1.1.1.jar
./share/hadoop/common/lib/stax2-api-4.2.1.jar
./share/hadoop/common/lib/kerby-xdr-2.0.3.jar
./share/hadoop/common/lib/netty-codec-haproxy-4.1.100.Final.jar
./share/hadoop/common/lib/netty-codec-socks-4.1.100.Final.jar
./share/hadoop/common/lib/netty-transport-classes-epoll-4.1.100.Final.jar
./share/hadoop/common/lib/netty-codec-xml-4.1.100.Final.jar
./share/hadoop/common/lib/netty-handler-ssl-ocsp-4.1.100.Final.jar
./share/hadoop/common/lib/netty-handler-proxy-4.1.100.Final.jar
./share/hadoop/common/lib/netty-transport-4.1.100.Final.jar
./share/hadoop/common/lib/kerb-simplekdc-2.0.3.jar
./share/hadoop/common/lib/jul-to-slf4j-1.7.30.jar
./share/hadoop/common/lib/jaxb-api-2.2.11.jar
./share/hadoop/common/lib/netty-resolver-dns-4.1.100.Final.jar
./share/hadoop/common/lib/jakarta.activation-api-1.2.1.jar
./share/hadoop/common/lib/snappy-java-1.1.10.4.jar
./share/hadoop/common/lib/netty-resolver-4.1.100.Final.jar
./share/hadoop/common/lib/kerb-common-2.0.3.jar
./share/hadoop/common/lib/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
./share/hadoop/common/lib/metrics-core-3.2.4.jar
./share/hadoop/common/lib/jsp-api-2.1.jar
./share/hadoop/common/lib/hadoop-annotations-3.4.1-SNAPSHOT.jar
./share/hadoop/common/lib/avro-1.9.2.jar
./share/hadoop/common/lib/kerb-core-2.0.3.jar
./share/hadoop/common/lib/jersey-core-1.19.4.jar
./share/hadoop/common/lib/commons-math3-3.6.1.jar
./share/hadoop/common/lib/netty-transport-native-kqueue-4.1.100.Final-osx-aarch_64.jar
./share/hadoop/common/lib/netty-resolver-dns-native-macos-4.1.100.Final-osx-aarch_64.jar
./share/hadoop/common/lib/netty-transport-sctp-4.1.100.Final.jar
./share/hadoop/common/lib/netty-transport-native-unix-common-4.1.100.Final.jar
./share/hadoop/common/lib/j2objc-annotations-1.1.jar
./share/hadoop/common/lib/netty-transport-classes-kqueue-4.1.100.Final.jar
./share/hadoop/common/lib/hadoop-shaded-protobuf_3_21-1.2.0.jar
./share/hadoop/common/lib/jetty-servlet-9.4.53.v20231009.jar
./share/hadoop/common/lib/netty-codec-4.1.100.Final.jar
./share/hadoop/common/lib/commons-collections-3.2.2.jar
./share/hadoop/common/lib/kerby-util-2.0.3.jar
./share/hadoop/common/lib/commons-codec-1.15.jar
./share/hadoop/common/lib/jettison-1.5.4.jar
./share/hadoop/common/lib/audience-annotations-0.12.0.jar
./share/hadoop/common/lib/netty-resolver-dns-native-macos-4.1.100.Final-osx-x86_64.jar
./share/hadoop/common/lib/curator-recipes-5.2.0.jar
./share/hadoop/common/lib/netty-resolver-dns-classes-macos-4.1.100.Final.jar
./share/hadoop/common/lib/commons-beanutils-1.9.4.jar
./share/hadoop/common/lib/netty-transport-native-epoll-4.1.100.Final-linux-x86_64.jar
./share/hadoop/common/lib/kerb-crypto-2.0.3.jar
./share/hadoop/common/lib/jackson-annotations-2.12.7.jar
./share/hadoop/common/lib/jsch-0.1.55.jar
./share/hadoop/common/lib/netty-transport-udt-4.1.100.Final.jar
./share/hadoop/common/lib/jetty-security-9.4.53.v20231009.jar
./share/hadoop/common/lib/jackson-databind-2.12.7.1.jar
./share/hadoop/common/lib/netty-codec-memcache-4.1.100.Final.jar
./share/hadoop/common/lib/re2j-1.1.jar
./share/hadoop/common/lib/kerb-admin-2.0.3.jar
./share/hadoop/common/lib/hadoop-auth-3.4.1-SNAPSHOT.jar
./share/hadoop/common/lib/commons-lang3-3.12.0.jar
./share/hadoop/common/lib/httpclient-4.5.13.jar
./share/hadoop/common/lib/animal-sniffer-annotations-1.17.jar
./share/hadoop/common/lib/netty-transport-native-epoll-4.1.100.Final.jar
./share/hadoop/common/lib/jetty-http-9.4.53.v20231009.jar
./share/hadoop/common/lib/jsr305-3.0.2.jar
./share/hadoop/common/lib/bcprov-jdk15on-1.70.jar
./share/hadoop/common/lib/kerb-client-2.0.3.jar
./share/hadoop/common/lib/netty-codec-http2-4.1.100.Final.jar
./share/hadoop/common/lib/commons-daemon-1.0.13.jar
./share/hadoop/common/lib/jetty-xml-9.4.53.v20231009.jar
./share/hadoop/common/lib/token-provider-2.0.3.jar
./share/hadoop/common/lib/netty-transport-native-kqueue-4.1.100.Final-osx-x86_64.jar
./share/hadoop/common/lib/commons-text-1.10.0.jar
./share/hadoop/common/sources/hadoop-common-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/common/sources/hadoop-common-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/common/hadoop-registry-3.4.1-SNAPSHOT.jar
./share/hadoop/common/hadoop-common-3.4.1-SNAPSHOT-tests.jar
./share/hadoop/common/hadoop-nfs-3.4.1-SNAPSHOT.jar
./share/hadoop/hdfs/hadoop-hdfs-rbf-3.4.1-SNAPSHOT-tests.jar
./share/hadoop/hdfs/hadoop-hdfs-nfs-3.4.1-SNAPSHOT.jar
./share/hadoop/hdfs/hadoop-hdfs-native-client-3.4.1-SNAPSHOT.jar
./share/hadoop/hdfs/hadoop-hdfs-rbf-3.4.1-SNAPSHOT.jar
./share/hadoop/hdfs/hadoop-hdfs-native-client-3.4.1-SNAPSHOT-tests.jar
./share/hadoop/hdfs/hadoop-hdfs-client-3.4.1-SNAPSHOT.jar
./share/hadoop/hdfs/hadoop-hdfs-httpfs-3.4.1-SNAPSHOT.jar
./share/hadoop/hdfs/hadoop-hdfs-3.4.1-SNAPSHOT-tests.jar
./share/hadoop/hdfs/hadoop-hdfs-3.4.1-SNAPSHOT.jar
./share/hadoop/hdfs/hadoop-hdfs-client-3.4.1-SNAPSHOT-tests.jar
./share/hadoop/hdfs/lib/jaxb-impl-2.2.3-1.jar
./share/hadoop/hdfs/lib/jetty-webapp-9.4.53.v20231009.jar
./share/hadoop/hdfs/lib/curator-client-5.2.0.jar
./share/hadoop/hdfs/lib/netty-handler-4.1.100.Final.jar
./share/hadoop/hdfs/lib/nimbus-jose-jwt-9.31.jar
./share/hadoop/hdfs/lib/kerby-pkix-2.0.3.jar
./share/hadoop/hdfs/lib/jackson-core-2.12.7.jar
./share/hadoop/hdfs/lib/netty-all-4.1.100.Final.jar
./share/hadoop/hdfs/lib/netty-codec-redis-4.1.100.Final.jar
./share/hadoop/hdfs/lib/commons-configuration2-2.8.0.jar
./share/hadoop/hdfs/lib/hadoop-shaded-guava-1.2.0.jar
./share/hadoop/hdfs/lib/kerb-server-2.0.3.jar
./share/hadoop/hdfs/lib/zookeeper-jute-3.8.3.jar
./share/hadoop/hdfs/lib/netty-codec-dns-4.1.100.Final.jar
./share/hadoop/hdfs/lib/jetty-util-ajax-9.4.53.v20231009.jar
./share/hadoop/hdfs/lib/netty-codec-stomp-4.1.100.Final.jar
./share/hadoop/hdfs/lib/kerb-identity-2.0.3.jar
./share/hadoop/hdfs/lib/failureaccess-1.0.jar
./share/hadoop/hdfs/lib/checker-qual-2.5.2.jar
./share/hadoop/hdfs/lib/jersey-servlet-1.19.4.jar
./share/hadoop/hdfs/lib/netty-transport-native-epoll-4.1.100.Final-linux-aarch_64.jar
./share/hadoop/hdfs/lib/kerby-asn1-2.0.3.jar
./share/hadoop/hdfs/lib/commons-cli-1.5.0.jar
./share/hadoop/hdfs/lib/woodstox-core-5.4.0.jar
./share/hadoop/hdfs/lib/dnsjava-3.4.0.jar
./share/hadoop/hdfs/lib/curator-framework-5.2.0.jar
./share/hadoop/hdfs/lib/commons-compress-1.24.0.jar
./share/hadoop/hdfs/lib/httpcore-4.4.13.jar
./share/hadoop/hdfs/lib/kerby-config-2.0.3.jar
./share/hadoop/hdfs/lib/commons-logging-1.1.3.jar
./share/hadoop/hdfs/lib/netty-codec-smtp-4.1.100.Final.jar
./share/hadoop/hdfs/lib/kerb-util-2.0.3.jar
./share/hadoop/hdfs/lib/netty-codec-mqtt-4.1.100.Final.jar
./share/hadoop/hdfs/lib/commons-io-2.14.0.jar
./share/hadoop/hdfs/lib/jersey-json-1.20.jar
./share/hadoop/hdfs/lib/commons-net-3.9.0.jar
./share/hadoop/hdfs/lib/javax.servlet-api-3.1.0.jar
./share/hadoop/hdfs/lib/jersey-server-1.19.4.jar
./share/hadoop/hdfs/lib/jline-3.9.0.jar
./share/hadoop/hdfs/lib/log4j-1.2.17.jar
./share/hadoop/hdfs/lib/jetty-server-9.4.53.v20231009.jar
./share/hadoop/hdfs/lib/jetty-util-9.4.53.v20231009.jar
./share/hadoop/hdfs/lib/netty-transport-rxtx-4.1.100.Final.jar
./share/hadoop/hdfs/lib/guava-27.0-jre.jar
./share/hadoop/hdfs/lib/netty-codec-http-4.1.100.Final.jar
./share/hadoop/hdfs/lib/netty-buffer-4.1.100.Final.jar
./share/hadoop/hdfs/lib/gson-2.9.0.jar
./share/hadoop/hdfs/lib/jcip-annotations-1.0-1.jar
./share/hadoop/hdfs/lib/zookeeper-3.8.3.jar
./share/hadoop/hdfs/lib/netty-common-4.1.100.Final.jar
./share/hadoop/hdfs/lib/jetty-io-9.4.53.v20231009.jar
./share/hadoop/hdfs/lib/jsr311-api-1.1.1.jar
./share/hadoop/hdfs/lib/stax2-api-4.2.1.jar
./share/hadoop/hdfs/lib/kerby-xdr-2.0.3.jar
./share/hadoop/hdfs/lib/netty-codec-haproxy-4.1.100.Final.jar
./share/hadoop/hdfs/lib/netty-codec-socks-4.1.100.Final.jar
./share/hadoop/hdfs/lib/netty-transport-classes-epoll-4.1.100.Final.jar
./share/hadoop/hdfs/lib/netty-codec-xml-4.1.100.Final.jar
./share/hadoop/hdfs/lib/netty-handler-ssl-ocsp-4.1.100.Final.jar
./share/hadoop/hdfs/lib/netty-handler-proxy-4.1.100.Final.jar
./share/hadoop/hdfs/lib/netty-transport-4.1.100.Final.jar
./share/hadoop/hdfs/lib/kerb-simplekdc-2.0.3.jar
./share/hadoop/hdfs/lib/jaxb-api-2.2.11.jar
./share/hadoop/hdfs/lib/json-simple-1.1.1.jar
./share/hadoop/hdfs/lib/netty-resolver-dns-4.1.100.Final.jar
./share/hadoop/hdfs/lib/jakarta.activation-api-1.2.1.jar
./share/hadoop/hdfs/lib/snappy-java-1.1.10.4.jar
./share/hadoop/hdfs/lib/netty-resolver-4.1.100.Final.jar
./share/hadoop/hdfs/lib/kerb-common-2.0.3.jar
./share/hadoop/hdfs/lib/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
./share/hadoop/hdfs/lib/metrics-core-3.2.4.jar
./share/hadoop/hdfs/lib/hadoop-annotations-3.4.1-SNAPSHOT.jar
./share/hadoop/hdfs/lib/avro-1.9.2.jar
./share/hadoop/hdfs/lib/kerb-core-2.0.3.jar
./share/hadoop/hdfs/lib/jersey-core-1.19.4.jar
./share/hadoop/hdfs/lib/commons-math3-3.6.1.jar
./share/hadoop/hdfs/lib/netty-transport-native-kqueue-4.1.100.Final-osx-aarch_64.jar
./share/hadoop/hdfs/lib/netty-resolver-dns-native-macos-4.1.100.Final-osx-aarch_64.jar
./share/hadoop/hdfs/lib/netty-transport-sctp-4.1.100.Final.jar
./share/hadoop/hdfs/lib/netty-transport-native-unix-common-4.1.100.Final.jar
./share/hadoop/hdfs/lib/j2objc-annotations-1.1.jar
./share/hadoop/hdfs/lib/netty-transport-classes-kqueue-4.1.100.Final.jar
./share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_21-1.2.0.jar
./share/hadoop/hdfs/lib/jetty-servlet-9.4.53.v20231009.jar
./share/hadoop/hdfs/lib/netty-codec-4.1.100.Final.jar
./share/hadoop/hdfs/lib/commons-collections-3.2.2.jar
./share/hadoop/hdfs/lib/kerby-util-2.0.3.jar
./share/hadoop/hdfs/lib/commons-codec-1.15.jar
./share/hadoop/hdfs/lib/jettison-1.5.4.jar
./share/hadoop/hdfs/lib/audience-annotations-0.12.0.jar
./share/hadoop/hdfs/lib/netty-resolver-dns-native-macos-4.1.100.Final-osx-x86_64.jar
./share/hadoop/hdfs/lib/curator-recipes-5.2.0.jar
./share/hadoop/hdfs/lib/netty-resolver-dns-classes-macos-4.1.100.Final.jar
./share/hadoop/hdfs/lib/commons-beanutils-1.9.4.jar
./share/hadoop/hdfs/lib/netty-transport-native-epoll-4.1.100.Final-linux-x86_64.jar
./share/hadoop/hdfs/lib/kerb-crypto-2.0.3.jar
./share/hadoop/hdfs/lib/jackson-annotations-2.12.7.jar
./share/hadoop/hdfs/lib/jsch-0.1.55.jar
./share/hadoop/hdfs/lib/netty-transport-udt-4.1.100.Final.jar
./share/hadoop/hdfs/lib/jetty-security-9.4.53.v20231009.jar
./share/hadoop/hdfs/lib/jackson-databind-2.12.7.1.jar
./share/hadoop/hdfs/lib/netty-codec-memcache-4.1.100.Final.jar
./share/hadoop/hdfs/lib/re2j-1.1.jar
./share/hadoop/hdfs/lib/kerb-admin-2.0.3.jar
./share/hadoop/hdfs/lib/hadoop-auth-3.4.1-SNAPSHOT.jar
./share/hadoop/hdfs/lib/commons-lang3-3.12.0.jar
./share/hadoop/hdfs/lib/httpclient-4.5.13.jar
./share/hadoop/hdfs/lib/animal-sniffer-annotations-1.17.jar
./share/hadoop/hdfs/lib/leveldbjni-all-1.8.jar
./share/hadoop/hdfs/lib/netty-transport-native-epoll-4.1.100.Final.jar
./share/hadoop/hdfs/lib/jetty-http-9.4.53.v20231009.jar
./share/hadoop/hdfs/lib/jsr305-3.0.2.jar
./share/hadoop/hdfs/lib/HikariCP-4.0.3.jar
./share/hadoop/hdfs/lib/kerb-client-2.0.3.jar
./share/hadoop/hdfs/lib/netty-codec-http2-4.1.100.Final.jar
./share/hadoop/hdfs/lib/commons-daemon-1.0.13.jar
./share/hadoop/hdfs/lib/jetty-xml-9.4.53.v20231009.jar
./share/hadoop/hdfs/lib/token-provider-2.0.3.jar
./share/hadoop/hdfs/lib/netty-transport-native-kqueue-4.1.100.Final-osx-x86_64.jar
./share/hadoop/hdfs/lib/commons-text-1.10.0.jar
./share/hadoop/hdfs/sources/hadoop-hdfs-client-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/hdfs/sources/hadoop-hdfs-native-client-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/hdfs/sources/hadoop-hdfs-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/hdfs/sources/hadoop-hdfs-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/hdfs/sources/hadoop-hdfs-client-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/hdfs/sources/hadoop-hdfs-native-client-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/hdfs/sources/hadoop-hdfs-rbf-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/hdfs/sources/hadoop-hdfs-rbf-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-uploader-3.4.1-SNAPSHOT.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-hs-3.4.1-SNAPSHOT.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-core-3.4.1-SNAPSHOT.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-common-3.4.1-SNAPSHOT.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-hs-plugins-3.4.1-SNAPSHOT.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-jobclient-3.4.1-SNAPSHOT-tests.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-jobclient-3.4.1-SNAPSHOT.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-app-3.4.1-SNAPSHOT.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-jobclient-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-hs-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-hs-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-hs-plugins-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-nativetask-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-shuffle-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-common-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-nativetask-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-core-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-core-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-examples-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-common-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-jobclient-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-hs-plugins-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-examples-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-app-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-app-3.4.1-SNAPSHOT-sources.jar
./share/hadoop/mapreduce/sources/hadoop-mapreduce-client-shuffle-3.4.1-SNAPSHOT-test-sources.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-nativetask-3.4.1-SNAPSHOT.jar
./share/hadoop/mapreduce/hadoop-mapreduce-examples-3.4.1-SNAPSHOT.jar
./share/hadoop/mapreduce/hadoop-mapreduce-client-shuffle-3.4.1-SNAPSHOT.jar
./share/hadoop/client/hadoop-client-runtime-3.4.1-SNAPSHOT.jar
./share/hadoop/client/hadoop-client-api-3.4.1-SNAPSHOT.jar
./share/hadoop/client/hadoop-client-minicluster-3.4.1-SNAPSHOT.jar
{code}
and sorted with duplicates stripped out, we get
{code}
HikariCP-4.0.3.jar
aliyun-java-sdk-core-4.5.10.jar
aliyun-java-sdk-kms-2.11.0.jar
aliyun-java-sdk-ram-3.1.0.jar
aliyun-sdk-oss-3.13.2.jar
animal-sniffer-annotations-1.17.jar
animal-sniffer-annotations-1.21.jar
annotations-4.1.1.4.jar
aopalliance-1.0.jar
asm-commons-9.6.jar
asm-tree-9.6.jar
audience-annotations-0.12.0.jar
avro-1.9.2.jar
azure-cosmosdb-2.4.5.jar
azure-cosmosdb-commons-2.4.5.jar
azure-cosmosdb-direct-2.4.5.jar
azure-cosmosdb-gateway-2.4.5.jar
azure-data-lake-store-sdk-2.3.9.jar
azure-keyvault-core-1.0.0.jar
azure-storage-7.0.1.jar
bcpkix-jdk15on-1.70.jar
bcprov-jdk15on-1.70.jar
bcutil-jdk15on-1.70.jar
bundle-2.23.19.jar
checker-qual-2.5.2.jar
codemodel-2.6.jar
commons-beanutils-1.9.4.jar
commons-cli-1.5.0.jar
commons-codec-1.15.jar
commons-collections-3.2.2.jar
commons-collections4-4.2.jar
commons-compress-1.24.0.jar
commons-configuration2-2.8.0.jar
commons-csv-1.9.0.jar
commons-daemon-1.0.13.jar
commons-digester-1.8.1.jar
commons-io-2.14.0.jar
commons-lang-2.6.jar
commons-lang3-3.12.0.jar
commons-logging-1.1.3.jar
commons-math3-3.6.1.jar
commons-net-3.9.0.jar
commons-text-1.10.0.jar
commons-validator-1.6.jar
curator-client-5.2.0.jar
curator-framework-5.2.0.jar
curator-recipes-5.2.0.jar
dnsjava-3.4.0.jar
ehcache-3.3.1.jar
error_prone_annotations-2.14.0.jar
failureaccess-1.0.jar
fst-2.50.jar
geronimo-jcache_1.0_spec-1.0-alpha-1.jar
grpc-api-1.53.0.jar
grpc-context-1.53.0.jar
grpc-core-1.53.0.jar
grpc-netty-1.53.0.jar
grpc-protobuf-1.53.0.jar
grpc-protobuf-lite-1.53.0.jar
grpc-stub-1.53.0.jar
gson-2.9.0.jar
guava-12.0.1.jar
guava-27.0-jre.jar
guice-4.0.jar
guice-4.2.3.jar
guice-servlet-4.2.3.jar
hamcrest-core-1.3.jar
hbase-annotations-1.7.1.jar
hbase-client-1.7.1.jar
hbase-common-1.7.1.jar
hbase-protocol-1.7.1.jar
hbase-shaded-gson-3.0.0.jar
htrace-core-3.1.0-incubating.jar
httpclient-4.5.13.jar
httpcore-4.4.13.jar
ini4j-0.5.4.jar
j2objc-annotations-1.1.jar
jackson-annotations-2.12.7.jar
jackson-core-2.12.7.jar
jackson-databind-2.12.7.1.jar
jackson-jaxrs-base-2.12.7.jar
jackson-jaxrs-json-provider-2.12.7.jar
jackson-module-jaxb-annotations-2.12.7.jar
jakarta.activation-api-1.2.1.jar
jakarta.xml.bind-api-2.3.2.jar
java-uuid-generator-3.1.4.jar
javax-websocket-server-impl-9.4.53.v20231009.jar
javax.annotation-api-1.3.2.jar
javax.inject-1.jar
javax.servlet-api-3.1.0.jar
javax.websocket-api-1.0.jar
javax.websocket-client-api-1.0.jar
jaxb-api-2.2.11.jar
jaxb-impl-2.2.3-1.jar
jcip-annotations-1.0-1.jar
jcodings-1.0.13.jar
jdk.tools-1.8.jar
jdom2-2.0.6.1.jar
jersey-client-1.19.4.jar
jersey-core-1.19.4.jar
jersey-guice-1.19.4.jar
jersey-json-1.20.jar
jersey-server-1.19.4.jar
jettison-1.5.4.jar
jetty-annotations-9.4.53.v20231009.jar
jetty-client-9.4.53.v20231009.jar
jetty-http-9.4.53.v20231009.jar
jetty-io-9.4.53.v20231009.jar
jetty-jndi-9.4.53.v20231009.jar
jetty-plus-9.4.53.v20231009.jar
jetty-security-9.4.53.v20231009.jar
jetty-server-9.4.53.v20231009.jar
jetty-servlet-9.4.53.v20231009.jar
jetty-util-9.4.53.v20231009.jar
jetty-util-ajax-9.4.53.v20231009.jar
jetty-webapp-9.4.53.v20231009.jar
jetty-xml-9.4.53.v20231009.jar
jline-3.9.0.jar
jna-5.2.0.jar
joni-2.1.2.jar
jsch-0.1.55.jar
json-simple-1.1.1.jar
jsonschema2pojo-core-1.0.2.jar
jsp-api-2.1.jar
jsr305-3.0.2.jar
jsr311-api-1.1.1.jar
jul-to-slf4j-1.7.30.jar
junit-4.13.2.jar
kafka-clients-2.8.2.jar
kerb-admin-2.0.3.jar
kerb-client-2.0.3.jar
kerb-common-2.0.3.jar
kerb-core-2.0.3.jar
kerb-crypto-2.0.3.jar
kerb-identity-2.0.3.jar
kerb-server-2.0.3.jar
kerb-simplekdc-2.0.3.jar
kerb-util-2.0.3.jar
kerby-asn1-2.0.3.jar
kerby-config-2.0.3.jar
kerby-pkix-2.0.3.jar
kerby-util-2.0.3.jar
kerby-xdr-2.0.3.jar
leveldbjni-all-1.8.jar
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
log4j-1.2.17.jar
lz4-java-1.7.1.jar
metrics-core-2.2.0.jar
metrics-core-3.2.4.jar
mssql-jdbc-6.2.1.jre7.jar
netty-all-4.1.100.Final.jar
netty-buffer-4.1.100.Final.jar
netty-codec-4.1.100.Final.jar
netty-codec-dns-4.1.100.Final.jar
netty-codec-haproxy-4.1.100.Final.jar
netty-codec-http-4.1.100.Final.jar
netty-codec-http2-4.1.100.Final.jar
netty-codec-memcache-4.1.100.Final.jar
netty-codec-mqtt-4.1.100.Final.jar
netty-codec-redis-4.1.100.Final.jar
netty-codec-smtp-4.1.100.Final.jar
netty-codec-socks-4.1.100.Final.jar
netty-codec-stomp-4.1.100.Final.jar
netty-codec-xml-4.1.100.Final.jar
netty-common-4.1.100.Final.jar
netty-handler-4.1.100.Final.jar
netty-handler-proxy-4.1.100.Final.jar
netty-handler-ssl-ocsp-4.1.100.Final.jar
netty-resolver-4.1.100.Final.jar
netty-resolver-dns-4.1.100.Final.jar
netty-resolver-dns-classes-macos-4.1.100.Final.jar
netty-resolver-dns-native-macos-4.1.100.Final-osx-aarch_64.jar
netty-transport-4.1.100.Final.jar
netty-transport-classes-epoll-4.1.100.Final.jar
netty-transport-classes-kqueue-4.1.100.Final.jar
netty-transport-native-epoll-4.1.100.Final-linux-aarch_64.jar
netty-transport-native-epoll-4.1.100.Final-linux-x86_64.jar
netty-transport-native-epoll-4.1.100.Final.jar
netty-transport-native-kqueue-4.1.100.Final-osx-aarch_64.jar
netty-transport-native-kqueue-4.1.100.Final-osx-x86_64.jar
netty-transport-native-unix-common-4.1.100.Final.jar
netty-transport-rxtx-4.1.100.Final.jar
netty-transport-sctp-4.1.100.Final.jar
netty-transport-udt-4.1.100.Final.jar
nimbus-jose-jwt-9.31.jar
objenesis-2.6.jar
ojalgo-43.0.jar
opentracing-api-0.33.0.jar
opentracing-noop-0.33.0.jar
opentracing-util-0.33.0.jar
org.jacoco.agent-0.8.5-runtime.jar
perfmark-api-0.25.0.jar
proto-google-common-protos-2.9.0.jar
protobuf-java-2.5.0.jar
re2j-1.1.jar
rxjava-1.3.8.jar
rxjava-extras-0.8.0.17.jar
rxjava-string-1.1.1.jar
rxnetty-0.4.20.jar
slf4j-api-1.7.30.jar
slf4j-log4j12-1.7.30.jar
snakeyaml-2.0.jar
snappy-java-1.1.10.4.jar
stax2-api-4.2.1.jar
swagger-annotations-1.5.4.jar
token-provider-2.0.3.jar
websocket-api-9.4.53.v20231009.jar
websocket-client-9.4.53.v20231009.jar
websocket-common-9.4.53.v20231009.jar
websocket-server-9.4.53.v20231009.jar
websocket-servlet-9.4.53.v20231009.jar
wildfly-openssl-1.1.3.Final.jar
woodstox-core-5.4.0.jar
zookeeper-3.8.3.jar
zookeeper-jute-3.8.3.jar
zstd-jni-1.4.9-1.jar
{code}
hmm. what can/should we do here?
* log4j is in there, rather than reload4j
* somehow protobuf-2.5 is still in yarn even though it is not for our own ipc
and binding dynamically for hbase
* duplicates of some things getting in with inconsistent versions. these are
going into separate places, and coming in transitively, but they still need
cleaning up.
let me see about logj4; i think it is in because of the ongoing work to move to
log4j was targeting trunk and we didn't move to slf4j.
otherwise, let's target this work for 3.4.1. Get 3.4.0 out the door ASAP and
plan for a fast iteration. I'm expecting s3a bugs to surface with the new sDK
*anyway* after all
> Long Standing High Risk CVE in Hadoop
> -------------------------------------
>
> Key: HDFS-17377
> URL: https://issues.apache.org/jira/browse/HDFS-17377
> Project: Hadoop HDFS
> Issue Type: Improvement
> Affects Versions: 3.4.0
> Reporter: Prathap Sagar S
> Priority: Major
> Attachments: HADOOP_CVE_LIST.xlsx
>
>
> Our ongoing security scans are turning up several long-standing CVEs, even in
> the most recent version of Hadoop, which is making it difficult for us to use
> Hadoop in our echo system. A comprehensive list of all the long-standing CVEs
> and the JARs holding them is attached. I'm asking for community assistance to
> address these high-risk vulnerabilities as soon as possible.
>
> |Vulnerability ID|Severity|Package name|Package version|Package type|Package
> path|Package suggested fix|
> |CVE-2023-2976|High|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-guava-1.1.1.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|12.0.1|java|/hadoop-3.4.0/share/hadoop/yarn/timelineservice/lib/guava-12.0.1.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|27.0-jre|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/guava-27.0-jre.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|27.0-jre|java|/hadoop-3.4.0/share/hadoop/common/lib/guava-27.0-jre.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-guava-1.1.1.jar|v32.0.0-android|
> |CVE-2022-25647|High|com.google.code.gson:gson|2.8.5|java|/hadoop-3.4.0/share/hadoop/yarn/timelineservice/lib/hbase-shaded-gson-3.0.0.jar|v2.8.9|
> |CVE-2022-3171|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2022-3171|High|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2022-3171|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-guava-1.1.1.jar|v3.16.3|
> |CVE-2022-3171|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3509|High|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2022-3509|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2022-3509|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3509|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3510|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3510|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3510|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2022-3510|High|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2023-39410|High|org.apache.avro:avro|1.9.2|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/avro-1.9.2.jar|v1.11.3|
> |CVE-2023-39410|High|org.apache.avro:avro|1.9.2|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v1.11.3|
> |CVE-2023-39410|High|org.apache.avro:avro|1.9.2|java|/hadoop-3.4.0/share/hadoop/common/lib/avro-1.9.2.jar|v1.11.3|
> |CVE-2021-22570|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2021-22570|Medium|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2021-22570|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2021-22570|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2021-22569|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2021-22569|Medium|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2021-22569|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2021-22569|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2018-10237|Medium|com.google.guava:guava|12.0.1|java|/hadoop-3.4.0/share/hadoop/yarn/timelineservice/lib/guava-12.0.1.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-guava-1.1.1.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|27.0-jre|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/guava-27.0-jre.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-guava-1.1.1.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|27.0-jre|java|/hadoop-3.4.0/share/hadoop/common/lib/guava-27.0-jre.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|12.0.1|java|/hadoop-3.4.0/share/hadoop/yarn/timelineservice/lib/guava-12.0.1.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|27.0-jre|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/guava-27.0-jre.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|12.0.1|java|/hadoop-3.4.0/share/hadoop/yarn/timelineservice/lib/guava-12.0.1.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-guava-1.1.1.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|27.0-jre|java|/hadoop-3.4.0/share/hadoop/common/lib/guava-27.0-jre.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v32.0.0-android|
> |CVE-2023-2976|High|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-guava-1.1.1.jar|v32.0.0-android|
> |CVE-2022-25647|High|com.google.code.gson:gson|2.8.5|java|/hadoop-3.4.0/share/hadoop/yarn/timelineservice/lib/hbase-shaded-gson-3.0.0.jar|v2.8.9|
> |CVE-2022-3171|High|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2022-3171|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3171|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3171|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2022-3509|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3509|High|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2022-3509|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3509|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2022-3510|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3510|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2022-3510|High|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2022-3510|High|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2023-39410|High|org.apache.avro:avro|1.9.2|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/avro-1.9.2.jar|v1.11.3|
> |CVE-2023-39410|High|org.apache.avro:avro|1.9.2|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v1.11.3|
> |CVE-2023-39410|High|org.apache.avro:avro|1.9.2|java|/hadoop-3.4.0/share/hadoop/common/lib/avro-1.9.2.jar|v1.11.3|
> |CVE-2021-22570|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2021-22570|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2021-22570|Medium|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2021-22570|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2021-22569|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v3.16.3|
> |CVE-2021-22569|Medium|com.google.protobuf:protobuf-java|2.5.0|java|/hadoop-3.4.0/share/hadoop/yarn/lib/protobuf-java-2.5.0.jar|v3.16.3|
> |CVE-2021-22569|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2021-22569|Medium|com.google.protobuf:protobuf-java|3.7.1|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-protobuf_3_7-1.1.1.jar|v3.16.3|
> |CVE-2018-10237|Medium|com.google.guava:guava|12.0.1|java|/hadoop-3.4.0/share/hadoop/yarn/timelineservice/lib/guava-12.0.1.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/hadoop-shaded-guava-1.1.1.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/common/lib/hadoop-shaded-guava-1.1.1.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|30.1.1-jre|java|/hadoop-3.4.0/share/hadoop/client/hadoop-client-runtime-3.4.0-SNAPSHOT.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|12.0.1|java|/hadoop-3.4.0/share/hadoop/yarn/timelineservice/lib/guava-12.0.1.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|27.0-jre|java|/hadoop-3.4.0/share/hadoop/common/lib/guava-27.0-jre.jar|v32.0.0-android|
> |CVE-2020-8908|Low|com.google.guava:guava|27.0-jre|java|/hadoop-3.4.0/share/hadoop/hdfs/lib/guava-27.0-jre.jar|v32.0.0-android|
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
