You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@livy.apache.org by "jiewang (JIRA)" <ji...@apache.org> on 2019/07/10 08:18:00 UTC

[jira] [Commented] (LIVY-597) Upgrade Livy guava dependency

    [ https://issues.apache.org/jira/browse/LIVY-597?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16881831#comment-16881831 ] 

jiewang commented on LIVY-597:
------------------------------

Hi [~arunmahadevan],  livy-587 conflicts with livy-597  about guava. Because guava was not used by livy any more,  how about removing the dependency instead of upgrading guava?

> Upgrade Livy guava dependency
> -----------------------------
>
>                 Key: LIVY-597
>                 URL: https://issues.apache.org/jira/browse/LIVY-597
>             Project: Livy
>          Issue Type: Improvement
>            Reporter: Arun Mahadevan
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The guava 15.0 that Livy is using is affected by CVE-2018-10237.
> It seems Livy's guava usage is limited and we can upgrade the version
> seamlessly.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)