Skip to content
This repository was archived by the owner on Jan 16, 2026. It is now read-only.

Update guava dependency to v30.1#180

Merged
sushantdewan123 merged 1 commit intowavefrontHQ:masterfrom
hanwavefront:guava-30.1
Feb 5, 2021
Merged

Update guava dependency to v30.1#180
sushantdewan123 merged 1 commit intowavefrontHQ:masterfrom
hanwavefront:guava-30.1

Conversation

@hanwavefront
Copy link
Copy Markdown
Contributor

Resolves #179

@igalbk
Copy link
Copy Markdown

igalbk commented Jan 4, 2021

@sushantdewan123 Can you approve the review?

@sushantdewan123 sushantdewan123 merged commit b05d4b2 into wavefrontHQ:master Feb 5, 2021
@igalbk
Copy link
Copy Markdown

igalbk commented May 6, 2021

@sushantdewan123, @hanwavefront Can you create a new release with this fix?
We have a dependency on it and to fix the vulnerability.

@hanwavefront
Copy link
Copy Markdown
Contributor Author

@igalbk We've released https://github.com/wavefrontHQ/wavefront-sdk-java/releases/tag/v2.6.4 which includes this fix.

@nasioman
Copy link
Copy Markdown

nasioman commented Aug 2, 2021

Does this commit really solves the guava vulnerability? As far as i can see this method was just deprecated but not removed.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Shaded guava dependency is being flagged for CVE-2020-8908

4 participants