[
https://issues.apache.org/jira/browse/HADOOP-19791?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18053947#comment-18053947
]
Steve Loughran commented on HADOOP-19791:
-----------------------------------------
if it's a protobuf and guava cves, then it should be project wide.
you can do that via prs to the hadoop-thirdparty module, for which another
release would be needed
> Upgrade Google Cloud Storage to remediate CVEs
> ----------------------------------------------
>
> Key: HADOOP-19791
> URL: https://issues.apache.org/jira/browse/HADOOP-19791
> Project: Hadoop Common
> Issue Type: Task
> Components: cloud-storage
> Affects Versions: 3.4.2
> Reporter: Shubham Kalloli
> Priority: Major
> Fix For: 3.5.0
>
> Attachments: report.html
>
>
> Upgrading Google Cloud Storage from 2.52.0 to 2.62.0 to remediate
> CVE-2025-55163
> Updating Guava and Protobuf to prevent conflicts
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
