Hi All,

There was a CVE detected in Avro 1.8.2 (CVE-2023-39410), so I'm trying to
upgrade to avro 1.11.3.

Unfortunately, it seems that our auto-generated Avro test classes aren't
being generated properly with this new version. I've updated our avro
generation plugin as well, but for whatever reason, it seems that the
generated AvroTest file is being generated with references to classes that
did exist in 1.8.2, but no longer exist in 1.11.3.

It seems like our autogeneration is being run with the wrong avro version,
but I can't seem to find where that would be configured.

Here is the PR with my changes so far:
https://github.com/apache/beam/pull/29390

Is anyone familiar with what might be misconfigured here?

John

Reply via email to