[
https://issues.apache.org/jira/browse/LIVY-597?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16881831#comment-16881831
]
jiewang edited comment on LIVY-597 at 7/10/19 8:18 AM:
-------------------------------------------------------
Hi [~arunmahadevan], [LIVY-587|https://issues.apache.org/jira/browse/LIVY-587]
conflicts with [LIVY-597|https://issues.apache.org/jira/browse/LIVY-597] about
guava. Because guava was not used by livy any more, how about removing the
dependency instead of upgrading guava?
was (Author: runzhiwang):
Hi [~arunmahadevan], livy-587 conflicts with livy-597 about guava. Because
guava was not used by livy any more, how about removing the dependency instead
of upgrading guava?
> Upgrade Livy guava dependency
> -----------------------------
>
> Key: LIVY-597
> URL: https://issues.apache.org/jira/browse/LIVY-597
> Project: Livy
> Issue Type: Improvement
> Reporter: Arun Mahadevan
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The guava 15.0 that Livy is using is affected by CVE-2018-10237.
> It seems Livy's guava usage is limited and we can upgrade the version
> seamlessly.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
