Hi Martin,
 Thanks for the prompt reply but I am still unable to resolve the classes
above. Any other suggestions?

On Wed, May 18, 2022 at 6:11 PM Martin Grigorov <mgrigo...@apache.org>
wrote:

> Hi,
>
> You need to use
> https://search.maven.org/artifact/org.apache.avro/avro-ipc-netty/1.11.0/bundle
> instead.
>
>
> On Wed, May 18, 2022 at 2:41 PM Abhishek Dasgupta <
> abhishekdasgupta...@gmail.com> wrote:
>
>>
>>
>>
>> Hi,
>>   I am solving this CVE-2021-43045 in my project. I am upgrading Avro
>> and Avro-ipc from 1.7.6-cdh5.12.0 to 1.11.0. There are some
>> NettyTransceiver, NettyServer calls in the project. After upgrade, such
>> imports become un-resolvable which results in compilation error. From Avro
>> 1.9.0 onwards these classes moved to Avro.ipc.*netty* package. I add
>> this is my code but ’netty’ package is not resolved. In External
>> dependencies section avro-ipc (1.11.0) does not contain netty folder.
>> Kindly suggest what to do here as it is critical fix in my project. Here
>> are my dependencies:
>>
>> <dependency> <groupId>org.apache.avro</groupId>
>> <artifactId>avro</artifactId> <version>1.11.0</version> </dependency>
>>
>> <dependency> <groupId>org.apache.avro</groupId>
>> <artifactId>avro-ipc</artifactId> <version>1.11.0</version> </dependency>
>>
>>
>> Thanks,
>> Abhishek
>>
>>
>>

Reply via email to