bjornjorgensen commented on pull request #35584: URL: https://github.com/apache/spark/pull/35584#issuecomment-1046755171
@LuciferYang Thank you :) I see that none of the other PRs that can be found have come up with the fact that today there are two CVEs for Google guava. What's a little weird about this is that I chose [version 30.0-jre](https://mvnrepository.com/artifact/com.google.guava/guava) which is the first one without any known security holes. All the tests have passed. The difference is that for example [29326](https://github.com/apache/spark/pull/29326) or [33989](https://github.com/apache/spark/pull/33989) the tests fail. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
