[HADOOP-17083] Update guava to 27.0-jre in hadoop branch-2.10

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Affects Version/s: 2.10.0
• Component/s: common, security
• Assignee: Ahmed Hussein
• Reporter: Ahmed Hussein
• Created: 23/Jun/20 16:14
• Updated: 22/Jul/20 16:37
• Resolved: 22/Jul/20 16:37

Description

com.google.guava:guava should be upgraded to 27.0-jre due to new CVE's found CVE-2018-10237.

 

The upgrade should not affect the version of java used. branch-2.10 still sticks to JDK7