You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Apache Spark (Jira)" <ji...@apache.org> on 2022/01/13 19:31:00 UTC

[jira] [Assigned] (SPARK-37901) Upgrade Netty from 4.1.72 to 4.1.73

     [ https://issues.apache.org/jira/browse/SPARK-37901?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Apache Spark reassigned SPARK-37901:
------------------------------------

    Assignee: Apache Spark

> Upgrade Netty from 4.1.72 to 4.1.73
> -----------------------------------
>
>                 Key: SPARK-37901
>                 URL: https://issues.apache.org/jira/browse/SPARK-37901
>             Project: Spark
>          Issue Type: Improvement
>          Components: Build
>    Affects Versions: 3.3.0
>            Reporter: David Christle
>            Assignee: Apache Spark
>            Priority: Minor
>
> Netty has a new release that upgrades log4j to 2.17.1. Although I didn't find obvious dependence on log4j via netty in my search of Spark's codebase, it would be good to pick up this specific version. The version Spark currently depends on is 4.1.72, which depends on log4j 2.15. Several CVE's have been fixed in log4j between 2.15 and 2.17.1.
> Besides this dependency update, several minor bugfixes have been made in this release.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org