From 2227be4e2d36bbdf7d335ea814e228c538a22227 Mon Sep 17 00:00:00 2001
From: George Yang <haoqyang@amazon.com>
Date: Thu, 16 Jun 2022 15:25:13 -0700
Subject: [PATCH 1/2] Upgrading Avro version to prevent a CVE

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 41bd571a..6e656aa3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -83,7 +83,7 @@
         <aws.sdk.v1.version>1.12.151</aws.sdk.v1.version>
         <kafka.scala.version>2.12</kafka.scala.version>
         <kafka.version>2.8.1</kafka.version>
-        <avro.version>1.10.2</avro.version>
+        <avro.version>1.11.0</avro.version>
         <mbknor.jsonschema.converter.version>1.0.39</mbknor.jsonschema.converter.version>
         <everit.json.schema.version>1.12.2</everit.json.schema.version>
         <classgraph.version>4.8.120</classgraph.version>

From 4605d7229d1812e83593aaf43ed2673e64470398 Mon Sep 17 00:00:00 2001
From: George Yang <haoqyang@amazon.com>
Date: Fri, 17 Jun 2022 16:12:46 -0700
Subject: [PATCH 2/2] Upgrade version 1.1.11

Motivation: Upgrade Avro version to prevent a CVE
---
 CHANGELOG.md                              | 5 ++++-
 avro-flink-serde/pom.xml                  | 4 ++--
 avro-kafkaconnect-converter/pom.xml       | 2 +-
 build-tools/pom.xml                       | 2 +-
 common/pom.xml                            | 2 +-
 examples/pom.xml                          | 2 +-
 integration-tests/pom.xml                 | 2 +-
 jsonschema-kafkaconnect-converter/pom.xml | 2 +-
 kafkastreams-serde/pom.xml                | 2 +-
 pom.xml                                   | 2 +-
 protobuf-kafkaconnect-converter/pom.xml   | 2 +-
 serializer-deserializer/pom.xml           | 2 +-
 12 files changed, 16 insertions(+), 13 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 111a8417..2ccdb01c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -52,4 +52,7 @@ GlueSchemaRegistryKafkaSerializer/GlueSchemaRegistryKafkaDeserializer.
 * Add AWS SDK dependency to allow irsa service account
 
 ## Release 1.1.11
-* Add support for Kafka Connect Protobuf converter
\ No newline at end of file
+* Add support for Kafka Connect Protobuf converter
+
+## Release 1.11.12
+* Upgraded Avro Version to prevent a CVE
\ No newline at end of file
diff --git a/avro-flink-serde/pom.xml b/avro-flink-serde/pom.xml
index e269c974..25d725eb 100644
--- a/avro-flink-serde/pom.xml
+++ b/avro-flink-serde/pom.xml
@@ -21,7 +21,7 @@
 
     <groupId>software.amazon.glue</groupId>
     <artifactId>schema-registry-flink-serde</artifactId>
-    <version>1.1.11</version>
+    <version>1.1.12</version>
     <name>AWS Glue Schema Registry Flink Avro Serialization Deserialization Schema</name>
     <description>The AWS Glue Schema Registry Library for Apache Flink enables Java developers to easily integrate
         their Apache Flink applications with AWS Glue Schema Registry
@@ -66,7 +66,7 @@
         <dependency>
             <groupId>software.amazon.glue</groupId>
             <artifactId>schema-registry-serde</artifactId>
-            <version>1.1.11</version>
+            <version>1.1.12</version>
         </dependency>
 
         <dependency>
diff --git a/avro-kafkaconnect-converter/pom.xml b/avro-kafkaconnect-converter/pom.xml
index dae7a23c..6b97bedb 100644
--- a/avro-kafkaconnect-converter/pom.xml
+++ b/avro-kafkaconnect-converter/pom.xml
@@ -32,7 +32,7 @@
     <parent>
         <groupId>software.amazon.glue</groupId>
         <artifactId>schema-registry-parent</artifactId>
-        <version>1.1.11</version>
+        <version>1.1.12</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/build-tools/pom.xml b/build-tools/pom.xml
index 5c6d4954..55d57d42 100644
--- a/build-tools/pom.xml
+++ b/build-tools/pom.xml
@@ -22,7 +22,7 @@
     <parent>
         <groupId>software.amazon.glue</groupId>
         <artifactId>schema-registry-parent</artifactId>
-        <version>1.1.11</version>
+        <version>1.1.12</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/common/pom.xml b/common/pom.xml
index 4b3cb8b1..ab10664f 100644
--- a/common/pom.xml
+++ b/common/pom.xml
@@ -22,7 +22,7 @@
     <parent>
         <groupId>software.amazon.glue</groupId>
         <artifactId>schema-registry-parent</artifactId>
-        <version>1.1.11</version>
+        <version>1.1.12</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/examples/pom.xml b/examples/pom.xml
index 9326f4cf..6f5f0ef1 100644
--- a/examples/pom.xml
+++ b/examples/pom.xml
@@ -31,7 +31,7 @@
     <parent>
         <groupId>software.amazon.glue</groupId>
         <artifactId>schema-registry-parent</artifactId>
-        <version>1.1.11</version>
+        <version>1.1.12</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/integration-tests/pom.xml b/integration-tests/pom.xml
index 1c1e0cfe..f5d09bf9 100644
--- a/integration-tests/pom.xml
+++ b/integration-tests/pom.xml
@@ -31,7 +31,7 @@
     <parent>
         <groupId>software.amazon.glue</groupId>
         <artifactId>schema-registry-parent</artifactId>
-        <version>1.1.11</version>
+        <version>1.1.12</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/jsonschema-kafkaconnect-converter/pom.xml b/jsonschema-kafkaconnect-converter/pom.xml
index a39ef768..99171c46 100644
--- a/jsonschema-kafkaconnect-converter/pom.xml
+++ b/jsonschema-kafkaconnect-converter/pom.xml
@@ -32,7 +32,7 @@
     <parent>
         <groupId>software.amazon.glue</groupId>
         <artifactId>schema-registry-parent</artifactId>
-        <version>1.1.11</version>
+        <version>1.1.12</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/kafkastreams-serde/pom.xml b/kafkastreams-serde/pom.xml
index 6286511d..1ea9ca8c 100644
--- a/kafkastreams-serde/pom.xml
+++ b/kafkastreams-serde/pom.xml
@@ -32,7 +32,7 @@
     <parent>
         <groupId>software.amazon.glue</groupId>
         <artifactId>schema-registry-parent</artifactId>
-        <version>1.1.11</version>
+        <version>1.1.12</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/pom.xml b/pom.xml
index 6e656aa3..13468566 100644
--- a/pom.xml
+++ b/pom.xml
@@ -21,7 +21,7 @@
 
     <groupId>software.amazon.glue</groupId>
     <artifactId>schema-registry-parent</artifactId>
-    <version>1.1.11</version>
+    <version>1.1.12</version>
     <packaging>pom</packaging>
     <name>AWS Glue Schema Registry Library</name>
     <description>The AWS Glue Schema Registry Library for Java enables Java developers to easily integrate their
diff --git a/protobuf-kafkaconnect-converter/pom.xml b/protobuf-kafkaconnect-converter/pom.xml
index dd9072ca..25b6f5b4 100644
--- a/protobuf-kafkaconnect-converter/pom.xml
+++ b/protobuf-kafkaconnect-converter/pom.xml
@@ -22,7 +22,7 @@
     <parent>
         <groupId>software.amazon.glue</groupId>
         <artifactId>schema-registry-parent</artifactId>
-        <version>1.1.11</version>
+        <version>1.1.12</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/serializer-deserializer/pom.xml b/serializer-deserializer/pom.xml
index a19a5597..77f94134 100644
--- a/serializer-deserializer/pom.xml
+++ b/serializer-deserializer/pom.xml
@@ -32,7 +32,7 @@
     <parent>
         <groupId>software.amazon.glue</groupId>
         <artifactId>schema-registry-parent</artifactId>
-        <version>1.1.11</version>
+        <version>1.1.12</version>
         <relativePath>../pom.xml</relativePath>
     </parent>