Hi Martin, Thanks for the prompt reply but I am still unable to resolve the classes above. Any other suggestions?
On Wed, May 18, 2022 at 6:11 PM Martin Grigorov <mgrigo...@apache.org> wrote: > Hi, > > You need to use > https://search.maven.org/artifact/org.apache.avro/avro-ipc-netty/1.11.0/bundle > instead. > > > On Wed, May 18, 2022 at 2:41 PM Abhishek Dasgupta < > abhishekdasgupta...@gmail.com> wrote: > >> >> >> >> Hi, >> I am solving this CVE-2021-43045 in my project. I am upgrading Avro >> and Avro-ipc from 1.7.6-cdh5.12.0 to 1.11.0. There are some >> NettyTransceiver, NettyServer calls in the project. After upgrade, such >> imports become un-resolvable which results in compilation error. From Avro >> 1.9.0 onwards these classes moved to Avro.ipc.*netty* package. I add >> this is my code but ’netty’ package is not resolved. In External >> dependencies section avro-ipc (1.11.0) does not contain netty folder. >> Kindly suggest what to do here as it is critical fix in my project. Here >> are my dependencies: >> >> <dependency> <groupId>org.apache.avro</groupId> >> <artifactId>avro</artifactId> <version>1.11.0</version> </dependency> >> >> <dependency> <groupId>org.apache.avro</groupId> >> <artifactId>avro-ipc</artifactId> <version>1.11.0</version> </dependency> >> >> >> Thanks, >> Abhishek >> >> >>