[SPARK-38925] update guava to 30.1.1-jre

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 3.0.0, 3.0.1, 3.0.2, 3.1.0, 3.1.1, 3.1.2, 3.2.0, 3.2.1
• Component/s: Build
• Assignee: Apache Spark
• Reporter: Qian Sun
• Created: 17/Apr/22 01:38
• Updated: 14/Jun/22 00:33
• Resolved: 14/Jun/22 00:33

Description

Update guava to 30.1.1-jre

guava 14.0.1 has risk:

• CVE-2020-8908
• CVE-2018-10237

 

Issue Links

• links to: [Github] Pull Request #36231 (dcoliversun)