[ORC-599] Bump guava version to 28.1-jre

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.1, 2.0.0
• Fix Version/s: 1.7.0, 1.6.8
• Assignee: Panagiotis Garefalakis
• Reporter: Panagiotis Garefalakis
• Created: 12/Feb/20 19:13
• Updated: 27/Nov/23 21:26
• Resolved: 14/Feb/20 03:26

Description

Even though guava dependency is used only by Test classes it make sense to upgrade due to known security vulnerabilities  https://nvd.nist.gov/vuln/detail/CVE-2018-10237 and to reduce the dependency footprint e.g. Apache Hive is upgrading to 28.1-jre https://issues.apache.org/jira/browse/HIVE-21569

Issue Links

• links to: GitHub Pull Request #481