You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@livy.apache.org by "jiewang (JIRA)" <ji...@apache.org> on 2019/07/10 08:19:00 UTC

[jira] [Comment Edited] (LIVY-597) Upgrade Livy guava dependency

    [ https://issues.apache.org/jira/browse/LIVY-597?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16881831#comment-16881831 ] 

jiewang edited comment on LIVY-597 at 7/10/19 8:18 AM:
-------------------------------------------------------

Hi [~arunmahadevan],  [LIVY-587|https://issues.apache.org/jira/browse/LIVY-587] conflicts with [LIVY-597|https://issues.apache.org/jira/browse/LIVY-597]  about guava. Because guava was not used by livy any more,  how about removing the dependency instead of upgrading guava?


was (Author: runzhiwang):
Hi [~arunmahadevan],  livy-587 conflicts with livy-597  about guava. Because guava was not used by livy any more,  how about removing the dependency instead of upgrading guava?

> Upgrade Livy guava dependency
> -----------------------------
>
>                 Key: LIVY-597
>                 URL: https://issues.apache.org/jira/browse/LIVY-597
>             Project: Livy
>          Issue Type: Improvement
>            Reporter: Arun Mahadevan
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The guava 15.0 that Livy is using is affected by CVE-2018-10237.
> It seems Livy's guava usage is limited and we can upgrade the version
> seamlessly.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)