Merge pull request #1497 from nawaz34-hitachivantara/PPP-5200

[PPP-5200] Vulnerable Component: Avro (Hadoop Vulnerable Component Only)
pentaho · Nov 6, 2024 · 167cb2b · 167cb2b
2 parents 0204160 + eb5a2db
commit 167cb2b
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/shims/emr700/driver/pom.xml b/shims/emr700/driver/pom.xml
@@ -13,7 +13,7 @@
   <packaging>bundle</packaging>
 
   <properties>
-    <org.apache.avro.version>1.8.0</org.apache.avro.version>
+    <org.apache.avro.version>1.12.0</org.apache.avro.version>
     <org.apache.hive.version>3.1.3</org.apache.hive.version>
     <org.apache.oozie.version>5.2.1</org.apache.oozie.version>
     <org.apache.hbase.version>2.4.17</org.apache.hbase.version>
@@ -477,6 +477,10 @@
           <groupId>org.yaml</groupId>
           <artifactId>snakeyaml</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>org.apache.avro</groupId>
+          <artifactId>avro</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
     <dependency>