Hi, You need to use https://search.maven.org/artifact/org.apache.avro/avro-ipc-netty/1.11.0/bundle instead.
On Wed, May 18, 2022 at 2:41 PM Abhishek Dasgupta < abhishekdasgupta...@gmail.com> wrote: > > > > Hi, > I am solving this CVE-2021-43045 in my project. I am upgrading Avro and > Avro-ipc from 1.7.6-cdh5.12.0 to 1.11.0. There are some NettyTransceiver, > NettyServer calls in the project. After upgrade, such imports become > un-resolvable which results in compilation error. From Avro 1.9.0 onwards > these classes moved to Avro.ipc.*netty* package. I add this is my code > but ’netty’ package is not resolved. In External dependencies section > avro-ipc (1.11.0) does not contain netty folder. Kindly suggest what to do > here as it is critical fix in my project. Here are my dependencies: > > <dependency> <groupId>org.apache.avro</groupId> > <artifactId>avro</artifactId> <version>1.11.0</version> </dependency> > > <dependency> <groupId>org.apache.avro</groupId> > <artifactId>avro-ipc</artifactId> <version>1.11.0</version> </dependency> > > > Thanks, > Abhishek > > >