[
https://issues.apache.org/jira/browse/DRILL-7950?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17362794#comment-17362794
]
ASF GitHub Bot commented on DRILL-7950:
---------------------------------------
cgivre merged pull request #2253:
URL: https://github.com/apache/drill/pull/2253
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
> Drill classpath includes both avatica-core:jar:1.15.0 and avatica:jar:1.17.0
> ----------------------------------------------------------------------------
>
> Key: DRILL-7950
> URL: https://issues.apache.org/jira/browse/DRILL-7950
> Project: Apache Drill
> Issue Type: Bug
> Affects Versions: 1.19.0
> Reporter: Vova Vysotskyi
> Assignee: Vova Vysotskyi
> Priority: Critical
> Fix For: 1.20.0
>
>
> Drill classpath now includes both jars fat jar for shaded avativa
> (`avatica`:jar:1.17.0) and jar for `avatica-core` with a different version -
> 1.15.0.
> The latest one should be excluded from the classpath since it conflicts with
> classes from the fat jar and has some vulnerabilities that we attempted to
> fix in DRILL-7918.
> {code:bash}
> mvn dependency:tree -Dincludes=org.apache.calcite.avatica:avatica* -pl
> contrib/storage-cassandra,contrib/storage-elasticsearch
> [INFO] ----------< org.apache.drill.contrib:drill-storage-cassandra
> >----------
> [INFO] Building Drill : Contrib : Storage : Cassandra 1.19.0
> [1/2]
> [INFO] --------------------------------[ jar
> ]---------------------------------
> [INFO]
> [INFO] --- maven-dependency-plugin:3.1.1:tree (default-cli) @
> drill-storage-cassandra ---
> [INFO] org.apache.drill.contrib:drill-storage-cassandra:jar:1.19.0
> [INFO] +- org.apache.drill.exec:drill-java-exec:jar:1.19.0:compile
> [INFO] | \- org.apache.calcite.avatica:avatica:jar:1.17.0:compile
> [INFO] \-
> com.github.vvysotskyi.drill-calcite:calcite-cassandra:jar:1.21.0-drill-r2:compile
> [INFO] \- org.apache.calcite.avatica:avatica-core:jar:1.15.0:compile
> [INFO] \- org.apache.calcite.avatica:avatica-metrics:jar:1.15.0:compile
> [INFO]
> [INFO] --------< org.apache.drill.contrib:drill-storage-elasticsearch
> >--------
> [INFO] Building Drill : Contrib : Storage : ElasticSearch 1.19.0
> [2/2]
> [INFO] --------------------------------[ jar
> ]---------------------------------
> [INFO]
> [INFO] --- maven-dependency-plugin:3.1.1:tree (default-cli) @
> drill-storage-elasticsearch ---
> [INFO] org.apache.drill.contrib:drill-storage-elasticsearch:jar:1.19.0
> [INFO] +- org.apache.drill.exec:drill-java-exec:jar:1.19.0:compile
> [INFO] | \- org.apache.calcite.avatica:avatica:jar:1.17.0:compile
> [INFO] \-
> com.github.vvysotskyi.drill-calcite:calcite-elasticsearch:jar:1.21.0-drill-r2:compile
> [INFO] \- org.apache.calcite.avatica:avatica-core:jar:1.15.0:compile
> [INFO] \- org.apache.calcite.avatica:avatica-metrics:jar:1.15.0:compile
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
