This is an automated email from the ASF dual-hosted git repository.
stevel pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/hadoop-thirdparty.git
The following commit(s) were added to refs/heads/trunk by this push:
new 82c44f8 HADOOP-19300. upgrade to avro 1.11.4 (#40)
82c44f8 is described below
commit 82c44f8f3e3e3eb89725764644f4c17974dae800
Author: PJ Fanning <pjfann...@users.noreply.github.com>
AuthorDate: Thu Mar 6 14:31:02 2025 +0100
HADOOP-19300. upgrade to avro 1.11.4 (#40)
Addresses CVE-2024-47561
Contributed by PJ Fanning
---
LICENSE-binary | 2 +-
pom.xml | 2 +-
src/site/markdown/index.md.vm | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index 95d9b42..833cdad 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -208,7 +208,7 @@ License Version 2.0:
com.google.guava:guava:jar:32.0.1-jre
com.google.j2objc:j2objc-annotations:1.3
com.google.errorprone:error_prone_annotations:2.5.1
-org.apache.avro:avro:1.11.3
+org.apache.avro:avro:1.11.4
--------------------------------------------------------------------------------
This product bundles various third-party components under other open source
diff --git a/pom.xml b/pom.xml
index e9cf051..6141ede 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,7 +99,7 @@
<protobuf.shade.prefix>${shaded.prefix}.protobuf</protobuf.shade.prefix>
<protobuf_3.version>3.25.5</protobuf_3.version>
<guava.version>32.0.1-jre</guava.version>
- <avro.version>1.11.3</avro.version>
+ <avro.version>1.11.4</avro.version>
<!-- maven plugin versions -->
<maven-deploy-plugin.version>2.8.1</maven-deploy-plugin.version>
diff --git a/src/site/markdown/index.md.vm b/src/site/markdown/index.md.vm
index 549975d..6274047 100644
--- a/src/site/markdown/index.md.vm
+++ b/src/site/markdown/index.md.vm
@@ -65,7 +65,7 @@ Following are relocations under *hadoop-shaded-guava*
artifact:
Avro
-------------
-Apache Avro's 1.11.3 jar is available as
*org.apache.hadoop.thirdparty:hadoop-shaded-avro* artifact.
+Apache Avro's 1.11.4 jar is available as
*org.apache.hadoop.thirdparty:hadoop-shaded-avro* artifact.
Following are relocations under *hadoop-shaded-avro* artifact:
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-commits-h...@hadoop.apache.org
