Merge pull request #2615 from Coduz/chng-bumpGuavaVersionTo27.1

Upgraded Guava version from 19.0 to 27.1-jre - CVE-2018-10237 - CWE-119

broker-core/src/main/java/org/eclipse/kapua/broker/core/listener/DeviceManagementNotificationMessageProcessor.java

@@ -15,6 +15,7 @@
 import com.google.common.base.MoreObjects;
 import org.apache.camel.Exchange;
 import org.apache.camel.spi.UriEndpoint;
+
 import org.eclipse.kapua.KapuaException;
 import org.eclipse.kapua.broker.core.message.CamelKapuaMessage;
 import org.eclipse.kapua.commons.metric.MetricServiceFactory;
@@ -24,6 +25,7 @@
 import org.eclipse.kapua.service.device.management.message.notification.KapuaNotifyMessage;
 import org.eclipse.kapua.service.device.management.message.notification.KapuaNotifyPayload;
 import org.eclipse.kapua.service.device.management.registry.manager.DeviceManagementRegistryManagerService;
+
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 

broker-core/src/main/readme.txt

@@ -40,7 +40,7 @@ replacing the ******* in the original file (this is an extract)
 copy all the jars needed by the application to the lib/kapua directory (this is the current list):
 
   358048  4 Ago 16:02 commons-configuration-1.9.jar
- 2308517  4 Ago 11:58 guava-19.0.jar
+ 2308517  4 Ago 11:58 guava-27.1.jar
   162116  4 Ago 16:04 javax.persistence-2.1.1.jar
    17750  4 Ago 16:26 jbcrypt-0.3m.jar
     6583  4 Ago 12:29 metrics-annotation-3.1.2.jar

pom.xml

@@ -45,7 +45,7 @@
         <elasticsearch.version>2.3.4</elasticsearch.version>
         <findbugs.version>2.0.1</findbugs.version>
         <gson.version>2.7</gson.version>
-        <guava.version>19.0</guava.version>
+        <guava.version>27.1-jre</guava.version>
         <guice.version>4.1.0</guice.version>
         <h2.version>1.4.192</h2.version>
         <httpcomponents.version>4.5.2</httpcomponents.version>