You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Swapnil (Jira)" <ji...@apache.org> on 2021/12/13 09:21:00 UTC

[jira] [Commented] (SPARK-6305) Add support for log4j 2.x to Spark

    [ https://issues.apache.org/jira/browse/SPARK-6305?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17458233#comment-17458233 ] 

Swapnil commented on SPARK-6305:
--------------------------------

Log4J 1 is out of support. For [CVE-2021-44228|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228] are there any recommendations for spark applications?

> Add support for log4j 2.x to Spark
> ----------------------------------
>
>                 Key: SPARK-6305
>                 URL: https://issues.apache.org/jira/browse/SPARK-6305
>             Project: Spark
>          Issue Type: Improvement
>          Components: Build
>            Reporter: Tal Sliwowicz
>            Priority: Minor
>
> log4j 2 requires replacing the slf4j binding and adding the log4j jars in the classpath. Since there are shaded jars, it must be done during the build.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org