You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@impala.apache.org by st...@apache.org on 2024/01/31 00:23:02 UTC

(impala) 01/04: IMPALA-12767: Upgrade Guava to 32.0.1 due to CVE-2023-2976

This is an automated email from the ASF dual-hosted git repository.

stigahuang pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/impala.git

commit f8302d90369f2c0fd912963eb764063f4a9a41e2
Author: Riza Suminto <ri...@cloudera.com>
AuthorDate: Mon Jan 29 10:14:00 2024 -0800

    IMPALA-12767: Upgrade Guava to 32.0.1 due to CVE-2023-2976
    
    This patch upgrade Guava version from 31.1-jre to 32.0.1-jre to address
    CVE-2023-2976.
    
    Testing:
    - Run and pass full build
      ./buildall.sh -skiptests -notests
    
    Change-Id: Id932ed32200fba4f24b4fdd108546ac4494fc3e8
    Reviewed-on: http://gerrit.cloudera.org:8080/20972
    Tested-by: Impala Public Jenkins <im...@cloudera.com>
    Reviewed-by: Joe McDonnell <jo...@cloudera.com>
---
 bin/impala-config.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/impala-config.sh b/bin/impala-config.sh
index 8aa37f036..0886006bd 100755
--- a/bin/impala-config.sh
+++ b/bin/impala-config.sh
@@ -276,7 +276,7 @@ export APACHE_OZONE_VERSION=1.3.0
 export IMPALA_BOUNCY_CASTLE_VERSION=1.68
 export IMPALA_COS_VERSION=3.1.0-8.0.8
 export IMPALA_DERBY_VERSION=10.14.2.0
-export IMPALA_GUAVA_VERSION=31.1-jre
+export IMPALA_GUAVA_VERSION=32.0.1-jre
 export IMPALA_HUDI_VERSION=0.5.0-incubating
 export IMPALA_HTTP_CORE_VERSION=4.4.14
 export IMPALA_JACKSON_DATABIND_VERSION=2.15.3