[fix][sec] Upgrade Avro to 1.11.4 to address CVE-2024-47561 (#23394)

(cherry picked from commit fad6761)

distribution/server/src/assemble/LICENSE.bin.txt

@@ -451,8 +451,8 @@ The Apache Software License, Version 2.0
  * zt-zip
  - org.zeroturnaround-zt-zip-1.17.jar
  * Apache Avro
- - org.apache.avro-avro-1.11.3.jar
- - org.apache.avro-avro-protobuf-1.11.3.jar
+ - org.apache.avro-avro-1.11.4.jar
+ - org.apache.avro-avro-protobuf-1.11.4.jar
  * Apache Curator
  - org.apache.curator-curator-client-5.1.0.jar
  - org.apache.curator-curator-framework-5.1.0.jar

distribution/shell/src/assemble/LICENSE.bin.txt

@@ -408,8 +408,8 @@ The Apache Software License, Version 2.0
  * Google Error Prone Annotations - error_prone_annotations-2.5.1.jar
  * Javassist -- javassist-3.25.0-GA.jar
  * Apache Avro
- - avro-1.11.3.jar
- - avro-protobuf-1.11.3.jar
+ - avro-1.11.4.jar
+ - avro-protobuf-1.11.4.jar
 
 BSD 3-clause "New" or "Revised" License
  * JSR305 -- jsr305-3.0.2.jar -- ../licenses/LICENSE-JSR305.txt

pom.xml

@@ -182,7 +182,7 @@ flexible messaging model and an intuitive client API.</description>
  <kafka-client.version>3.4.0</kafka-client.version>
  <rabbitmq-client.version>5.18.0</rabbitmq-client.version>
  <aws-sdk.version>1.12.262</aws-sdk.version>
- <avro.version>1.11.3</avro.version>
+ <avro.version>1.11.4</avro.version>
  <joda.version>2.10.10</joda.version>
  <jclouds.version>2.6.0</jclouds.version>
  <guice.version>5.1.0</guice.version>

pulsar-sql/presto-distribution/LICENSE

@@ -367,8 +367,8 @@ The Apache Software License, Version 2.0
  * OpenCSV
  - opencsv-2.3.jar
  * Avro
- - avro-1.11.3.jar
- - avro-protobuf-1.11.3.jar
+ - avro-1.11.4.jar
+ - avro-protobuf-1.11.4.jar
  * Caffeine
  - caffeine-2.9.1.jar
  * Javax