Update avro version (#5104)

Fixes CVE-2023-39410, which could cause a out-of-memory when reading untrusted avro data. Unlikely to be relevant in the context of Kafka.
deephaven · Feb 1, 2024 · 8cb0232 · 8cb0232
1 parent 1c1aa7e
commit 8cb0232
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/extensions/kafka/build.gradle b/extensions/kafka/build.gradle
@@ -10,7 +10,7 @@ dependencies {
 
     api project(':engine-processor')
 
-    api 'org.apache.avro:avro:1.11.2'
+    api 'org.apache.avro:avro:1.11.3'
 
     // Using io.confluent dependencies requires code in the toplevel build.gradle to add their maven repository.
     // Note: the -ccs flavor is provided by confluent as their community edition. It is equivalent to the maven central