>
> Hi,
> I am solving this CVE-2021-43045 in my project. I am upgrading Avro and
> Avro-ipc from 1.7.6-cdh5.12.0 to 1.11.0. There are some NettyTransceiver,
> NettyServer calls in the project. After upgrade, such imports become
> un-resolvable which results in compilation error. From Avro 1.9.0 onwards
> these classes moved to Avro.ipc.netty package. I add this is my code but
> ’netty’ package is not resolved. In External dependencies section avro-ipc
> (1.11.0) does not contain netty folder. Kindly suggest what to do here as it
> is critical fix in my project. Here are my dependencies:
>
> <dependency>
> <groupId>org.apache.avro</groupId>
> <artifactId>avro</artifactId>
> <version>1.11.0</version>
> </dependency>
>
> <dependency>
> <groupId>org.apache.avro</groupId>
> <artifactId>avro-ipc</artifactId>
> <version>1.11.0</version>
> </dependency>
>
>
> Thanks,
> Abhishek
