You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "eschcam (via GitHub)" <gi...@apache.org> on 2026/01/30 15:15:15 UTC

[PR] [Hotfix][Flink-CI-Tools] Update Guava to 32.0.1 [flink]

eschcam opened a new pull request, #27493:
URL: https://github.com/apache/flink/pull/27493

   ## What is the purpose of the change
   
   Guava 30.0-jre contains the following CVEs:
   * CVE-2023-2976
   * CVE-2020-8908
   
   
   ## Brief change log
   
   * Update guava to 32.0.1-jre
   
   
   ## Verifying this change
   
   Passes CI Tests
   
   ## Does this pull request potentially affect one of the following parts:
   
     - Dependencies (does it add or upgrade a dependency): yes
     - The public API, i.e., is any changed class annotated with `@Public(Evolving)`: no
     - The serializers: no
     - The runtime per-record code paths (performance sensitive): no
     - Anything that affects deployment or recovery: JobManager (and its components), Checkpointing, Kubernetes/Yarn, ZooKeeper: no
     - The S3 file system connector: no
   
   ## Documentation
   
     - Does this pull request introduce a new feature? no
     - If yes, how is the feature documented? not applicable
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-39147][Flink-CI-Tools] Update Guava to 32.0.1 [flink]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] commented on PR #27493:
URL: https://github.com/apache/flink/pull/27493#issuecomment-4541639532

   This PR is being marked as stale since it has not had any activity in the last 90 days. 
   If you would like to keep this PR alive, please leave a comment asking for a review. 
   If the PR has merge conflicts, update it with the latest from the base branch.
   
   If you are having difficulty finding a reviewer, please reach out to the 
   community, contact details can be found here: https://flink.apache.org/what-is-flink/community/
   
   If this PR is no longer valid or desired, please feel free to close it. 
   If no activity occurs in the next 30 days, it will be automatically closed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [Hotfix][Flink-CI-Tools] Update Guava to 32.0.1 [flink]

Posted by "snuyanzin (via GitHub)" <gi...@apache.org>.

snuyanzin commented on PR #27493:
URL: https://github.com/apache/flink/pull/27493#issuecomment-3825634908

   thanks for your PR
   tools are used only for ci, some CVE like CVE-2023-2976 is actual only if some certain methods are used in code, which is not the case here


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [Hotfix][Flink-CI-Tools] Update Guava to 32.0.1 [flink]

Posted by "eschcam (via GitHub)" <gi...@apache.org>.

eschcam commented on PR #27493:
URL: https://github.com/apache/flink/pull/27493#issuecomment-3841518410

   @flinkbot run azure
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-39147][Flink-CI-Tools] Update Guava to 32.0.1 [flink]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] closed pull request #27493: [FLINK-39147][Flink-CI-Tools] Update Guava to 32.0.1
URL: https://github.com/apache/flink/pull/27493


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-39147][Flink-CI-Tools] Update Guava to 32.0.1 [flink]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] commented on PR #27493:
URL: https://github.com/apache/flink/pull/27493#issuecomment-4807348221

   This PR has been closed since it has not had any activity in 120 days. 
   If you feel like this was a mistake, or you would like to continue working on it, 
   please feel free to re-open the PR and ask for a review.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [Hotfix][Flink-CI-Tools] Update Guava to 32.0.1 [flink]

Posted by "flinkbot (via GitHub)" <gi...@apache.org>.

flinkbot commented on PR #27493:
URL: https://github.com/apache/flink/pull/27493#issuecomment-3824280170

   <!--
   Meta data
   {
     "version" : 1,
     "metaDataEntries" : [ {
       "hash" : "103279b235fbcc1a7bc8703945c3bd395a674329",
       "status" : "UNKNOWN",
       "url" : "TBD",
       "triggerID" : "103279b235fbcc1a7bc8703945c3bd395a674329",
       "triggerType" : "PUSH"
     } ]
   }-->
   ## CI report:
   
   * 103279b235fbcc1a7bc8703945c3bd395a674329 UNKNOWN
   
   <details>
   <summary>Bot commands</summary>
     The @flinkbot bot supports the following commands:
   
    - `@flinkbot run azure` re-run the last Azure build
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org