Upgrade the Guava version

[ShahimSharafudeen]

Description

CVE-2020-8908 CVE-2023-2976
Security fix for Guava
vulnerable version : 26.0-jre
Fixed version : 32.0.1

Motivation and Context

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class. Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.

Impact

NA

Test Plan

Build got success.

Contributor checklist

• Please make sure your submission complies with our development, formatting, commit message, and attribution guidelines.
• PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
• Documented new properties (with its default value), SQL syntax, functions, or other functionality.
• If release notes are required, they follow the release notes guidelines.
• Adequate tests were added if applicable.
• CI passed.

Release Notes

== RELEASE NOTES ==
Security Changes
* Upgrade the Guava version to 33.1.0-jre :pr:`23731`

[linux-foundation-easycla]

• ✅login: ShahimSharafudeen / (c92621e)

The committers listed above are authorized under a signed CLA.

[agrawalreetika]

@ShahimSharafudeen Please sign a CLA, it's needed for the first PR - https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md#contributing-to-presto

[steveburnett]

Please fix the release note entry section - delete the first block, change the NO RELEASE NOTES heading, and specify the upgraded version.

== RELEASE NOTES ==

Security Changes
* Upgrade the Guava version to 33.1.0-jre :pr:`23731`

[denodo-research-labs]

The current version 32.1.0-jre is no affected by CVE-2020-8908 or CVE-2023-2976.

What CVE does 33.1.0-jre solve?

[ShahimSharafudeen]

@ShahimSharafudeen Please sign a CLA, it's needed for the first PR - https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md#contributing-to-presto

@agrawalreetika Done.

[ShahimSharafudeen]

Please fix the release note entry section - delete the first block, change the NO RELEASE NOTES heading, and specify the upgraded version.

== RELEASE NOTES ==

Security Changes
* Upgrade the Guava version to 33.1.0-jre :pr:`23731`

@steveburnett Updated.