Browse Source

[AMBARI-24771] Fix CVE issues for Ambari Metrics (2.7.3) (#2454)

avijayanhwx 7 years ago
parent
commit
c931dcc2b0

+ 1 - 1
ambari-metrics/ambari-metrics-common/pom.xml

@@ -154,7 +154,7 @@
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>14.0.1</version>
+      <version>18.0</version>
     </dependency>
     <dependency>
       <groupId>org.apache.curator</groupId>

+ 1 - 1
ambari-metrics/ambari-metrics-flume-sink/pom.xml

@@ -169,7 +169,7 @@ limitations under the License.
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>14.0.1</version>
+      <version>18.0</version>
     </dependency>
   </dependencies>
 </project>

+ 1 - 1
ambari-metrics/ambari-metrics-host-aggregator/pom.xml

@@ -40,7 +40,7 @@
         <dependency>
             <groupId>com.google.guava</groupId>
             <artifactId>guava</artifactId>
-            <version>14.0.1</version>
+            <version>18.0</version>
         </dependency>
         <dependency>
               <groupId>org.apache.ambari</groupId>

+ 2 - 2
ambari-metrics/ambari-metrics-timelineservice/pom.xml

@@ -553,7 +553,7 @@
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>14.0.1</version>
+      <version>18.0</version>
     </dependency>
     <dependency>
       <groupId>commons-logging</groupId>
@@ -780,7 +780,7 @@
     <dependency>
       <groupId>org.apache.kafka</groupId>
       <artifactId>kafka-clients</artifactId>
-      <version>0.11.0.1</version>
+      <version>0.11.0.3</version>
     </dependency>
 
     <dependency>

+ 1 - 1
ambari-metrics/ambari-metrics-timelineservice/src/main/java/org/apache/ambari/metrics/core/loadsimulator/net/RestMetricsSender.java

@@ -56,7 +56,7 @@ public class RestMetricsSender implements MetricsSender {
   public String pushMetrics(String payload) {
     String responseString = "";
     UrlService svc = null;
-    Stopwatch timer = new Stopwatch().start();
+    Stopwatch timer = Stopwatch.createStarted();
 
     try {
       LOG.info("server: {}", collectorServiceAddress);