CVE-2020-8908 guava: local information disclosure via temporary direc…

…tory created with unsafe permissions apache#3494

pom.xml

@@ -78,7 +78,7 @@
         <freemarker.version>2.3.31</freemarker.version><!-- @sync io.quarkiverse.freemarker:quarkus-freemarker-parent:${quarkiverse.freemarker.version} prop:freemarker.version -->
         <fommil.netlib.core.version>1.1.2</fommil.netlib.core.version><!-- Mess in Weka transitive deps -->
         <github-api.version>1.111</github-api.version><!-- Used in a Groovy script bellow -->
-        <guava.version>29.0-jre</guava.version>
+        <guava.version>30.1.1.jre-redhat-00001</guava.version><!-- @sync io.quarkus:quarkus-bootstrap-bom:${quarkus.version} prop:guava.version -->
         <graalvm.version>21.3.1.0-0-redhat-00001</graalvm.version><!-- @sync io.quarkus:quarkus-bom:${quarkus.version} dep:org.graalvm.nativeimage:svm -->
         <graalvm-community.version>21.2.0</graalvm-community.version><!-- keep in sync with graalvm.version -->
         <grpc.version>1.41.2.redhat-00001</grpc.version><!-- @sync io.quarkus:quarkus-bom:${quarkus.version} dep:io.grpc:grpc-core -->