[tez] branch master updated: TEZ-4504: Upgrade Guava to 32.0.1 due to CVE-2023-2976. (#303) (Ayush Saxena reviewed by Laszlo Bodor)

[ab...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

abstractdog pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tez.git


The following commit(s) were added to refs/heads/master by this push:
     new 5beab4ced TEZ-4504: Upgrade Guava to 32.0.1 due to CVE-2023-2976. (#303) (Ayush Saxena reviewed by Laszlo Bodor)
5beab4ced is described below

commit 5beab4ced9d07bc813a8d79ded111b72af5a2f02
Author: Ayush Saxena <ay...@apache.org>
AuthorDate: Wed Jul 26 13:48:45 2023 +0530

    TEZ-4504: Upgrade Guava to 32.0.1 due to CVE-2023-2976. (#303) (Ayush Saxena reviewed by Laszlo Bodor)
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 094aaedb2..a339d097e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -72,7 +72,7 @@
     <dependency-check-maven.version>1.3.6</dependency-check-maven.version>
     <findbugs-maven-plugin.version>3.0.5</findbugs-maven-plugin.version>
     <frontend-maven-plugin.version>1.8.0</frontend-maven-plugin.version>
-    <guava.version>31.1-jre</guava.version>
+    <guava.version>32.0.1-jre</guava.version>
     <hadoop.version>3.3.6</hadoop.version>
     <jdk.tools.version>1.8</jdk.tools.version>
     <jersey.version>1.19</jersey.version>