[HBASE-28127] Upgrade avro version to 1.11.3

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.6.0, 2.5.6, 3.0.0-beta-1
• Component/s: dependencies, security
• Hadoop Flags: Reviewed
• Assignee: Duo Zhang
• Reporter: Duo Zhang
• Created: 02/Oct/23 13:41
• Updated: 10/Oct/23 19:58
• Resolved: 09/Oct/23 15:01

Description

Dependabot has an alert about https://nvd.nist.gov/vuln/detail/CVE-2023-39410

But it says that it can not upgrade the dependencies automatically.

Let's update it manually.

Issue Links

• links to: GitHub Pull Request #5454