CLSA-2025-1765411681 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 3 com.google.guava packages to address 2 CVEs. Fixed in 25.1-android-tuxcare.1...

MGASA-2024-0159 Updated guava packages fix security vulnerabilities

A bug that could allow an attacker with access to the machine to potentially access data in a temporary directory created by the Guava. CVE-2020-8908 Predictable temporary files and directories used in FileBackedOutputStream. CVE-2023-2976...

MGASA-2021-0021 Updated guava packages fix security vulnerability

A temp directory creation vulnerability exist in Guava versions prior to 30.0 allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava com.google.common.io.Files.createTempDir. The permissions granted to the directory created default...