[HADOOP-16210] Update guava to 27.0-jre in hadoop-project trunk

• Type: Sub-task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.0
• Component/s: build
• Labels: incompatible
• Target Version/s: 3.3.0
• Hadoop Flags: Incompatible change
• Release Note: Guava has been updated to 27.0. Code built against this new version may not link against older releases because of new overloads of methods like Preconditions.checkArgument().
• Assignee: Gabor Bota
• Reporter: Gabor Bota
• Created: 27/Mar/19 14:42
• Updated: 20/Mar/23 12:12
• Resolved: 04/Apr/19 08:27

Description

com.google.guava:guava should be upgraded to 27.0-jre due to new CVE's found CVE-2018-10237.

This is a sub-task for trunk from HADOOP-15960 to track issues with that particular branch.

Issue Links

• causes: HADOOP-16222 Fix new deprecations after guava 27.0 update in trunk
• causes: TEZ-4074 Tez does not run with Hadoop Trunk (3.3.0-snapshot)
• contains: HADOOP-15272 Update Guava, see what breaks
• is related to: HADOOP-18670 Spark application's dependency conflicts with Hadoop's dependency
• is related to: HADOOP-17440 Downgrade guava version in trunk
• requires: HADOOP-16220 Add findbugs ignores for unjustified issues during update to guava to 27.0-jre in hadoop-project
• requires: HADOOP-16230 Correct findbug ignores for unjustified issues during update to guava to 27.0-jre in hadoop-project
• requires: HADOOP-16218 findbugs warning of null param to non-nullable method in Configuration with Guava update
• links to: GitHub Pull Request #674