[HADOOP-18300] Update google-gson to 2.9.0

• Type: Task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.4.0, 3.3.5
• Fix Version/s: 3.4.0, 3.2.4, 3.3.5
• Component/s: build
• Labels: pull-request-available
• Target Version/s: 3.4.0
• Hadoop Flags: Reviewed
• Assignee: Igor Dvorzhak
• Reporter: Igor Dvorzhak
• Created: 17/Jun/22 23:07
• Updated: 23/Jan/24 02:56
• Resolved: 23/Jun/22 00:23

Description

Update to the Gson 2.9.0 that has many fixes, and backward-compatible as long as Java 7+ is used.

Fixes CVE-2022-25647; Dos when unmarshalling data

Issue Links

• is a clone of: HADOOP-13464 update GSON to 2.7+
• links to: GitHub Pull Request #4454