[DRILL-7950] Drill classpath includes both avatica-core:jar:1.15.0 and avatica:jar:1.17.0

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.19.0
• Fix Version/s: 1.20.0
• Assignee: Vova Vysotskyi
• Reporter: Vova Vysotskyi
• Created: 06/Jun/21 18:42
• Updated: 14/Jun/21 07:45
• Resolved: 11/Jun/21 14:21

Description

Drill classpath now includes both jars fat jar for shaded avativa (`avatica`:jar:1.17.0) and jar for `avatica-core` with a different version - 1.15.0.

The latest one should be excluded from the classpath since it conflicts with classes from the fat jar and has some vulnerabilities that we attempted to fix in DRILL-7918. 

mvn dependency:tree -Dincludes=org.apache.calcite.avatica:avatica* -pl contrib/storage-cassandra,contrib/storage-elasticsearch

[INFO] ----------< org.apache.drill.contrib:drill-storage-cassandra >----------
[INFO] Building Drill : Contrib : Storage : Cassandra 1.19.0              [1/2]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:3.1.1:tree (default-cli) @ drill-storage-cassandra ---
[INFO] org.apache.drill.contrib:drill-storage-cassandra:jar:1.19.0
[INFO] +- org.apache.drill.exec:drill-java-exec:jar:1.19.0:compile
[INFO] |  \- org.apache.calcite.avatica:avatica:jar:1.17.0:compile
[INFO] \- com.github.vvysotskyi.drill-calcite:calcite-cassandra:jar:1.21.0-drill-r2:compile
[INFO]    \- org.apache.calcite.avatica:avatica-core:jar:1.15.0:compile
[INFO]       \- org.apache.calcite.avatica:avatica-metrics:jar:1.15.0:compile
[INFO]
[INFO] --------< org.apache.drill.contrib:drill-storage-elasticsearch >--------
[INFO] Building Drill : Contrib : Storage : ElasticSearch 1.19.0          [2/2]
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] --- maven-dependency-plugin:3.1.1:tree (default-cli) @ drill-storage-elasticsearch ---
[INFO] org.apache.drill.contrib:drill-storage-elasticsearch:jar:1.19.0
[INFO] +- org.apache.drill.exec:drill-java-exec:jar:1.19.0:compile
[INFO] |  \- org.apache.calcite.avatica:avatica:jar:1.17.0:compile
[INFO] \- com.github.vvysotskyi.drill-calcite:calcite-elasticsearch:jar:1.21.0-drill-r2:compile
[INFO]    \- org.apache.calcite.avatica:avatica-core:jar:1.15.0:compile
[INFO]       \- org.apache.calcite.avatica:avatica-metrics:jar:1.15.0:compile