On Wed, May 18, 2022 at 4:28 PM Abhishek Dasgupta < abhishekdasgupta...@gmail.com> wrote:
> Hi Martin, > Thanks for the prompt reply but I am still unable to resolve the classes > above. Any other suggestions? > https://github.com/apache/avro/blob/master/lang/java/ipc-netty/src/main/java/org/apache/avro/ipc/netty/NettyTransceiver.java https://github.com/apache/avro/blob/master/lang/java/ipc-netty/src/main/java/org/apache/avro/ipc/netty/NettyServer.java Both classes are in avro-ipc-netty. Maybe you didn't add the dependency properly in your project ?! > > On Wed, May 18, 2022 at 6:11 PM Martin Grigorov <mgrigo...@apache.org> > wrote: > >> Hi, >> >> You need to use >> https://search.maven.org/artifact/org.apache.avro/avro-ipc-netty/1.11.0/bundle >> instead. >> >> >> On Wed, May 18, 2022 at 2:41 PM Abhishek Dasgupta < >> abhishekdasgupta...@gmail.com> wrote: >> >>> >>> >>> >>> Hi, >>> I am solving this CVE-2021-43045 in my project. I am upgrading Avro >>> and Avro-ipc from 1.7.6-cdh5.12.0 to 1.11.0. There are some >>> NettyTransceiver, NettyServer calls in the project. After upgrade, such >>> imports become un-resolvable which results in compilation error. From Avro >>> 1.9.0 onwards these classes moved to Avro.ipc.*netty* package. I add >>> this is my code but ’netty’ package is not resolved. In External >>> dependencies section avro-ipc (1.11.0) does not contain netty folder. >>> Kindly suggest what to do here as it is critical fix in my project. Here >>> are my dependencies: >>> >>> <dependency> <groupId>org.apache.avro</groupId> >>> <artifactId>avro</artifactId> <version>1.11.0</version> </dependency> >>> >>> <dependency> <groupId>org.apache.avro</groupId> >>> <artifactId>avro-ipc</artifactId> <version>1.11.0</version> </dependency> >>> >>> >>> Thanks, >>> Abhishek >>> >>> >>>
