Skip to content

Commit

Permalink
Bump guava version from 31.0.1-jre to 32.0.1-jre (#4008)
Browse files Browse the repository at this point in the history
### Motivation

Bump guava version from 31.0.1-jre to 32.0.1-jre, Fix CVE-2023-2976

(cherry picked from commit 52e780f)
  • Loading branch information
shoothzj authored and zymap committed Aug 29, 2023
1 parent 15d310f commit d2cacdd
Show file tree
Hide file tree
Showing 4 changed files with 13 additions and 13 deletions.
8 changes: 4 additions & 4 deletions bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
Original file line number Diff line number Diff line change
Expand Up @@ -208,7 +208,7 @@ Apache Software License, Version 2.
- lib/com.fasterxml.jackson.core-jackson-annotations-2.13.4.jar [1]
- lib/com.fasterxml.jackson.core-jackson-core-2.13.4.jar [2]
- lib/com.fasterxml.jackson.core-jackson-databind-2.13.4.2.jar [3]
- lib/com.google.guava-guava-31.0.1-jre.jar [4]
- lib/com.google.guava-guava-32.0.1-jre.jar [4]
- lib/com.google.guava-failureaccess-1.0.1.jar [4]
- lib/com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar [4]
- lib/commons-cli-commons-cli-1.2.jar [5]
Expand Down Expand Up @@ -309,7 +309,7 @@ Apache Software License, Version 2.
- lib/com.google.http-client-google-http-client-1.41.0.jar [43]
- lib/com.google.http-client-google-http-client-gson-1.41.0.jar [43]
- lib/com.google.auto.value-auto-value-annotations-1.9.jar [44]
- lib/com.google.j2objc-j2objc-annotations-1.3.jar [45]
- lib/com.google.j2objc-j2objc-annotations-2.8.jar [45]
- lib/com.google.re2j-re2j-1.6.jar [46]
- lib/io.dropwizard.metrics-metrics-core-4.1.12.1.jar [47]
- lib/io.dropwizard.metrics-metrics-graphite-4.1.12.1.jar [47]
Expand All @@ -325,7 +325,7 @@ Apache Software License, Version 2.
[1] Source available at https://github.com/FasterXML/jackson-annotations/tree/jackson-annotations-2.13.4
[2] Source available at https://github.com/FasterXML/jackson-core/tree/jackson-core-2.13.4
[3] Source available at https://github.com/FasterXML/jackson-databind/tree/jackson-databind-2.13.4.2
[4] Source available at https://github.com/google/guava/tree/v31.0.1
[4] Source available at https://github.com/google/guava/tree/v32.0.1
[5] Source available at https://github.com/apache/commons-cli/tree/cli-1.2
[6] Source available at https://github.com/apache/commons-codec/tree/commons-codec-1.6-RC2
[7] Source available at https://github.com/apache/commons-configuration/tree/CONFIGURATION_1_10
Expand Down Expand Up @@ -681,7 +681,7 @@ This product uses the annotations from The Checker Framework, which are licensed
MIT License. For details, see deps/checker-qual-3.5.0/LICENSE

Bundles as
- lib/org.checkerframework-checker-qual-3.12.0.jar
- lib/org.checkerframework-checker-qual-3.33.0.jar
------------------------------------------------------------------------------------
This product bundles the Reactive Streams library, which is licensed under
Public Domain (CC0). For details, see deps/reactivestreams-1.0.3/LICENSE
Expand Down
8 changes: 4 additions & 4 deletions bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
Original file line number Diff line number Diff line change
Expand Up @@ -208,7 +208,7 @@ Apache Software License, Version 2.
- lib/com.fasterxml.jackson.core-jackson-annotations-2.13.4.jar [1]
- lib/com.fasterxml.jackson.core-jackson-core-2.13.4.jar [2]
- lib/com.fasterxml.jackson.core-jackson-databind-2.13.4.2.jar [3]
- lib/com.google.guava-guava-31.0.1-jre.jar [4]
- lib/com.google.guava-guava-32.0.1-jre.jar [4]
- lib/com.google.guava-failureaccess-1.0.1.jar [4]
- lib/com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar [4]
- lib/commons-cli-commons-cli-1.2.jar [5]
Expand Down Expand Up @@ -284,7 +284,7 @@ Apache Software License, Version 2.
- lib/com.google.auto.value-auto-value-annotations-1.9.jar [42]
- lib/com.google.http-client-google-http-client-1.41.0.jar [43]
- lib/com.google.http-client-google-http-client-gson-1.41.0.jar [43]
- lib/com.google.j2objc-j2objc-annotations-1.3.jar [44]
- lib/com.google.j2objc-j2objc-annotations-2.8.jar [44]
- lib/com.google.re2j-re2j-1.6.jar [45]
- lib/io.dropwizard.metrics-metrics-core-4.1.12.1.jar [46]
- lib/io.perfmark-perfmark-api-0.25.0.jar [47]
Expand All @@ -296,7 +296,7 @@ Apache Software License, Version 2.
[1] Source available at https://github.com/FasterXML/jackson-annotations/tree/jackson-annotations-2.13.4
[2] Source available at https://github.com/FasterXML/jackson-core/tree/jackson-core-2.13.4
[3] Source available at https://github.com/FasterXML/jackson-databind/tree/jackson-databind-2.13.4.2
[4] Source available at https://github.com/google/guava/tree/v31.0.1
[4] Source available at https://github.com/google/guava/tree/v32.0.1
[5] Source available at https://github.com/apache/commons-cli/tree/cli-1.2
[6] Source available at https://github.com/apache/commons-codec/tree/commons-codec-1.6-RC2
[7] Source available at https://github.com/apache/commons-configuration/tree/CONFIGURATION_1_10
Expand Down Expand Up @@ -601,7 +601,7 @@ This product uses the annotations from The Checker Framework, which are licensed
MIT License. For details, see deps/checker-qual-3.5.0/LICENSE

Bundles as
- lib/org.checkerframework-checker-qual-3.12.0.jar
- lib/org.checkerframework-checker-qual-3.33.0.jar
------------------------------------------------------------------------------------
This product bundles the Reactive Streams library, which is licensed under
Public Domain (CC0). For details, see deps/reactivestreams-1.0.3/LICENSE
Expand Down
8 changes: 4 additions & 4 deletions bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
Original file line number Diff line number Diff line change
Expand Up @@ -208,7 +208,7 @@ Apache Software License, Version 2.
- lib/com.fasterxml.jackson.core-jackson-annotations-2.13.4.jar [1]
- lib/com.fasterxml.jackson.core-jackson-core-2.13.4.jar [2]
- lib/com.fasterxml.jackson.core-jackson-databind-2.13.4.2.jar [3]
- lib/com.google.guava-guava-31.0.1-jre.jar [4]
- lib/com.google.guava-guava-32.0.1-jre.jar [4]
- lib/com.google.guava-failureaccess-1.0.1.jar [4]
- lib/com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar [4]
- lib/commons-cli-commons-cli-1.2.jar [5]
Expand Down Expand Up @@ -309,7 +309,7 @@ Apache Software License, Version 2.
- lib/com.google.http-client-google-http-client-1.41.0.jar [43]
- lib/com.google.http-client-google-http-client-gson-1.41.0.jar [43]
- lib/com.google.auto.value-auto-value-annotations-1.9.jar [44]
- lib/com.google.j2objc-j2objc-annotations-1.3.jar [45]
- lib/com.google.j2objc-j2objc-annotations-2.8.jar [45]
- lib/com.google.re2j-re2j-1.6.jar [46]
- lib/io.dropwizard.metrics-metrics-core-4.1.12.1.jar [47]
- lib/io.perfmark-perfmark-api-0.25.0.jar [48]
Expand All @@ -321,7 +321,7 @@ Apache Software License, Version 2.
[1] Source available at https://github.com/FasterXML/jackson-annotations/tree/jackson-annotations-2.13.4
[2] Source available at https://github.com/FasterXML/jackson-core/tree/jackson-core-2.13.4
[3] Source available at https://github.com/FasterXML/jackson-databind/tree/jackson-databind-2.13.4.2
[4] Source available at https://github.com/google/guava/tree/v31.0.1
[4] Source available at https://github.com/google/guava/tree/v32.0.1
[5] Source available at https://github.com/apache/commons-cli/tree/cli-1.2
[6] Source available at https://github.com/apache/commons-codec/tree/commons-codec-1.6-RC2
[7] Source available at https://github.com/apache/commons-configuration/tree/CONFIGURATION_1_10
Expand Down Expand Up @@ -670,7 +670,7 @@ This product uses the annotations from The Checker Framework, which are licensed
MIT License. For details, see deps/checker-qual-3.5.0/LICENSE

Bundles as
- lib/org.checkerframework-checker-qual-3.12.0.jar
- lib/org.checkerframework-checker-qual-3.33.0.jar
------------------------------------------------------------------------------------
This product bundles the Reactive Streams library, which is licensed under
Public Domain (CC0). For details, see deps/reactivestreams-1.0.3/LICENSE
Expand Down
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,7 @@
<google.code.version>3.0.2</google.code.version>
<google.errorprone.version>2.9.0</google.errorprone.version>
<grpc.version>1.54.1</grpc.version>
<guava.version>31.0.1-jre</guava.version>
<guava.version>32.0.1-jre</guava.version>
<kerby.version>1.1.1</kerby.version>
<hadoop.version>3.3.5</hadoop.version>
<hamcrest.version>1.3</hamcrest.version>
Expand Down

0 comments on commit d2cacdd

Please sign in to comment.