[
https://issues.apache.org/jira/browse/DRILL-7950?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Vova Vysotskyi updated DRILL-7950:
----------------------------------
Description:
Drill classpath now includes both jars fat jar for shaded avativa
(`avatica`:jar:1.17.0) and jar for `avatica-core` with a different version -
1.15.0.
The latest one should be excluded from the classpath since it conflicts with
classes from the fat jar and has some vulnerabilities that we attempted to fix
in DRILL-7918.
{code:bash}
mvn dependency:tree -Dincludes=org.apache.calcite.avatica:avatica* -pl
contrib/storage-cassandra,contrib/storage-elasticsearch
[INFO] ----------< org.apache.drill.contrib:drill-storage-cassandra >----------
[INFO] Building Drill : Contrib : Storage : Cassandra 1.19.0 [1/2]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:3.1.1:tree (default-cli) @
drill-storage-cassandra ---
[INFO] org.apache.drill.contrib:drill-storage-cassandra:jar:1.19.0
[INFO] +- org.apache.drill.exec:drill-java-exec:jar:1.19.0:compile
[INFO] | \- org.apache.calcite.avatica:avatica:jar:1.17.0:compile
[INFO] \-
com.github.vvysotskyi.drill-calcite:calcite-cassandra:jar:1.21.0-drill-r2:compile
[INFO] \- org.apache.calcite.avatica:avatica-core:jar:1.15.0:compile
[INFO] \- org.apache.calcite.avatica:avatica-metrics:jar:1.15.0:compile
[INFO]
[INFO] --------< org.apache.drill.contrib:drill-storage-elasticsearch >--------
[INFO] Building Drill : Contrib : Storage : ElasticSearch 1.19.0 [2/2]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:3.1.1:tree (default-cli) @
drill-storage-elasticsearch ---
[INFO] org.apache.drill.contrib:drill-storage-elasticsearch:jar:1.19.0
[INFO] +- org.apache.drill.exec:drill-java-exec:jar:1.19.0:compile
[INFO] | \- org.apache.calcite.avatica:avatica:jar:1.17.0:compile
[INFO] \-
com.github.vvysotskyi.drill-calcite:calcite-elasticsearch:jar:1.21.0-drill-r2:compile
[INFO] \- org.apache.calcite.avatica:avatica-core:jar:1.15.0:compile
[INFO] \- org.apache.calcite.avatica:avatica-metrics:jar:1.15.0:compile
{code}
was:
Drill classpath now includes both jars fat jar for shaded avativa
(`avatica`:jar:1.17.0) and jar for `avatica-core` with a different version -
1.15.0.
The latest one should be excluded from the classpath since it conflicts with
classes from the fat jar and has some vulnerabilities that we attempted to fix
in DRILL-7918.
> Drill classpath includes both avatica-core:jar:1.15.0 and avatica:jar:1.17.0
> ----------------------------------------------------------------------------
>
> Key: DRILL-7950
> URL: https://issues.apache.org/jira/browse/DRILL-7950
> Project: Apache Drill
> Issue Type: Bug
> Reporter: Vova Vysotskyi
> Assignee: Vova Vysotskyi
> Priority: Critical
>
> Drill classpath now includes both jars fat jar for shaded avativa
> (`avatica`:jar:1.17.0) and jar for `avatica-core` with a different version -
> 1.15.0.
> The latest one should be excluded from the classpath since it conflicts with
> classes from the fat jar and has some vulnerabilities that we attempted to
> fix in DRILL-7918.
> {code:bash}
> mvn dependency:tree -Dincludes=org.apache.calcite.avatica:avatica* -pl
> contrib/storage-cassandra,contrib/storage-elasticsearch
> [INFO] ----------< org.apache.drill.contrib:drill-storage-cassandra
> >----------
> [INFO] Building Drill : Contrib : Storage : Cassandra 1.19.0
> [1/2]
> [INFO] --------------------------------[ jar
> ]---------------------------------
> [INFO]
> [INFO] --- maven-dependency-plugin:3.1.1:tree (default-cli) @
> drill-storage-cassandra ---
> [INFO] org.apache.drill.contrib:drill-storage-cassandra:jar:1.19.0
> [INFO] +- org.apache.drill.exec:drill-java-exec:jar:1.19.0:compile
> [INFO] | \- org.apache.calcite.avatica:avatica:jar:1.17.0:compile
> [INFO] \-
> com.github.vvysotskyi.drill-calcite:calcite-cassandra:jar:1.21.0-drill-r2:compile
> [INFO] \- org.apache.calcite.avatica:avatica-core:jar:1.15.0:compile
> [INFO] \- org.apache.calcite.avatica:avatica-metrics:jar:1.15.0:compile
> [INFO]
> [INFO] --------< org.apache.drill.contrib:drill-storage-elasticsearch
> >--------
> [INFO] Building Drill : Contrib : Storage : ElasticSearch 1.19.0
> [2/2]
> [INFO] --------------------------------[ jar
> ]---------------------------------
> [INFO]
> [INFO] --- maven-dependency-plugin:3.1.1:tree (default-cli) @
> drill-storage-elasticsearch ---
> [INFO] org.apache.drill.contrib:drill-storage-elasticsearch:jar:1.19.0
> [INFO] +- org.apache.drill.exec:drill-java-exec:jar:1.19.0:compile
> [INFO] | \- org.apache.calcite.avatica:avatica:jar:1.17.0:compile
> [INFO] \-
> com.github.vvysotskyi.drill-calcite:calcite-elasticsearch:jar:1.21.0-drill-r2:compile
> [INFO] \- org.apache.calcite.avatica:avatica-core:jar:1.15.0:compile
> [INFO] \- org.apache.calcite.avatica:avatica-metrics:jar:1.15.0:compile
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
