[SPARK-38544] Upgrade log4j2 to 2.17.2

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.0
• Component/s: Build
• Assignee: Yang Jie
• Reporter: Yang Jie
• Created: 14/Mar/22 03:10
• Updated: 19/Mar/22 13:56
• Resolved: 19/Mar/22 13:56

Description

Log4j 2.17.2 has been released to:

• Over 50 improvements and fixes to the Log4j 1.x support. Continued testing has shown it is a suitable replacement for Log4j 1.x in most cases.
• Scripting now requires a system property be specified naming the languages the user wishes to allow. The scripting engine will not load if the property isn't set.
• By default, the only remote protocol allowed for loading configuration files is HTTPS. Users can specify a system property to allow others or prevent remote loading entirely.
• Variable resolution has been modified so that only properties defined as properties in the configuration file can be recursive. All other Lookups are now non-recursive. This addresses issues users were having resolving lookups specified in property definitions for use in the RoutingAppender and RollingFileAppender due to restrictions put in place in 2.17.1.
• Many other fixes and improvements.

 

The change report as follows:

https://logging.apache.org/log4j/2.x/changes-report.html#a2.17.2

Issue Links

• links to: [Github] Pull Request #35839 (LuciferYang)
• links to: [Github] Pull Request #35898 (jackylee-ch)