From a847c1a0fb0bd515c48557017aec01219094eac5 Mon Sep 17 00:00:00 2001
From: itsankit-google <itsankitjain@google.com>
Date: Thu, 24 Oct 2024 18:14:36 +0000
Subject: [PATCH] CVE-2024-47561: Exclude org.apache.avro:avro

---
 .../cdap-sentry-extension/cdap-sentry-binding/pom.xml       | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cdap-sentry/cdap-sentry-extension/cdap-sentry-binding/pom.xml b/cdap-sentry/cdap-sentry-extension/cdap-sentry-binding/pom.xml
index 5e12fed..ab8dfa0 100644
--- a/cdap-sentry/cdap-sentry-extension/cdap-sentry-binding/pom.xml
+++ b/cdap-sentry/cdap-sentry-extension/cdap-sentry-binding/pom.xml
@@ -58,6 +58,12 @@
     <dependency>
       <groupId>org.apache.hadoop</groupId>
       <artifactId>hadoop-common</artifactId>
+      <exclusions>
+        <exclusion>
+          <groupId>org.apache.avro</groupId>
+          <artifactId>avro</artifactId>
+        </exclusion>
+      </exclusions>
     </dependency>
     <dependency>
       <groupId>org.apache.zookeeper</groupId>