Skip to content

History / CVE 2018 10237

Revisions

  • Remove some references to Java 7. Guava has required Java 8 for a while now. Note also that the APIs in question are available even under Android [even without opt-in library desugaring](https://r8.googlesource.com/r8/+/refs/heads/main/src/main/java/com/android/tools/r8/ir/desugar/BackportedMethodRewriter.java). RELNOTES=n/a PiperOrigin-RevId: 654844953

    @cpovirk cpovirk committed Jul 22, 2024
    70f614a

  • Mention the -android flavor of Guava in our CVE page. https://groups.google.com/d/topic/guava-discuss/Np1tfGRfJTw/discussion ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=273960504

    @cpovirk cpovirk committed Oct 31, 2019
    e0fe503

  • Fix nonpublic identifiers and documentation that use "whitelist" or "blacklist" to use less problematic terms. RELNOTES=n/a ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=199834981

    @netdpb netdpb committed Jun 12, 2018
    59d746e

  • Fix link. RELNOTES=n/a ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=194985740

    @cpovirk cpovirk committed May 2, 2018
    305e40b

  • Mention 24.1.1, and fix another occurrence of 24.2. ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=194449328

    @cpovirk cpovirk committed May 1, 2018
    70db1ec

  • Change 24.2 to 25.0 since that's the version we're releasing. ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=194336466

    @cgdecker cgdecker committed Apr 26, 2018
    ab99df7

  • Avoid presizing arrays. RELNOTES=Fixed Denial of Service vulnerability for servers that use Guava and deserialize attacker data: [CVE-2018-10237](https://github.com/google/guava/wiki/CVE-2018-10237). ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=194113840

    @cpovirk cpovirk committed Apr 25, 2018
    dada003