[SPARK-39465] Log4j version upgrade to 2.17.2

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Done
• Affects Version/s: 3.2.1
• Component/s: Java API

Environment

Production 

• Assignee: Unassigned
• Reporter: Chethan G B
• Created: 14/Jun/22 09:36
• Updated: 16/Jun/22 01:22
• Resolved: 16/Jun/22 01:22

Description

Hi Team, 

There were talks about upgrading log4j to latest version available as part of security fix.

Wanted to know, if it is already upgraded.

 

Note: We are using  below dependencies,

 
<dependency>
          <groupId>org.apache.spark</groupId>
          <artifactId>spark-core_2.12</artifactId>
          <version>3.0.1</version>
</dependency>
<dependency>
          <groupId>org.apache.spark</groupId>
          <artifactId>spark-sql_2.12</artifactId>
          <version>3.0.1</version>
</dependency>
Kindly let us know when the log4j upgrade will be available for users ?