Skip to content

Conversation

@mr1716
Copy link

@mr1716 mr1716 commented Aug 16, 2022

What changes were proposed in this pull request?

Why are the changes needed?

THe version of guava used is an older version that is vulnerable to many different CVE and needs to be updated.

Does this PR introduce any user-facing change?

How was this patch tested?

@github-actions github-actions bot added the BUILD label Aug 16, 2022
Copy link
Member

@HyukjinKwon HyukjinKwon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will break Hadoop 2 compliation/support. Mind checking if that works with Hadoop 2 profile?

@AmplabJenkins
Copy link

Can one of the admins verify this patch?

@JoshRosen
Copy link
Contributor

Unfortunately, upgrading Guava will be more complicated than simply bumping the version; see prior discussions at #35584, #36231, and #33989

This pull request was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants