You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@drill.apache.org by "Vova Vysotskyi (Jira)" <ji...@apache.org> on 2021/06/06 18:43:00 UTC

[jira] [Created] (DRILL-7950) Drill classpath includes both avatica-core:jar:1.15.0 and avatica:jar:1.17.0

Vova Vysotskyi created DRILL-7950:
-------------------------------------

             Summary: Drill classpath includes both avatica-core:jar:1.15.0 and avatica:jar:1.17.0
                 Key: DRILL-7950
                 URL: https://issues.apache.org/jira/browse/DRILL-7950
             Project: Apache Drill
          Issue Type: Bug
            Reporter: Vova Vysotskyi


Drill classpath now includes both jars fat jar for shaded avativa (`avatica`:jar:1.17.0) and jar for `avatica-core` with a different version - 1.15.0.

The latest one should be excluded from the classpath since it conflicts with classes from the fat jar and has some vulnerabilities that we attempted to fix in DRILL-7918.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)