[SPARK-37883] log4j update to 2.17.1 in spark-core 3.2

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 3.2.0
• Component/s: Security, Spark Core
• Labels: https://mvnrepository.com/artifact/org.apache.spark/spark-core_2.12/3.2.0
• Flags: Important
• Assignee: Unassigned
• Reporter: Setu Agrawal
• Created: 12/Jan/22 15:16
• Updated: 12/Dec/22 18:11
• Resolved: 14/Jan/22 06:00

Description

We are using spark-core jar file, as below

libraryDependencies += "org.apache.spark" %% "spark-core" % "3.2.0"

as per maven repository it usgaes log4j older version, which need to be updated latest(2.17.1) to fix security vulenrability, please help us, how we can get update version spark-core, which usages latest updated log4j.

Thanks