Note that we've also released Guava 25.0, which contains the change in 24.1.1 and some additional changes.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>24.1.1-jre</version>
  <!-- or, for Android: -->
  <version>24.1.1-android</version>
</dependency>

Javadoc

• 24.1.1-jre
• 24.1.1-android

JDiff

(There are no API diffs from 24.1. Our release tooling generated the following diffs against the newer 25.0, which doesn't really make sense. We'll try to get that fixed for future patch releases.)

• 24.1.1-jre vs. 25.0-jre
• 24.1.1-android vs. 25.0-android
• 24.1.1-android vs. 24.1.1-jre

Changelog

• Fixed Denial of Service vulnerability for servers that use Guava and deserialize attacker data: CVE-2018-10237. (7ec8718f1)