You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@spark.apache.org by "Josh Rosen (Jira)" <ji...@apache.org> on 2022/06/16 01:22:00 UTC

[jira] [Commented] (SPARK-39465) Log4j version upgrade to 2.17.2

    [ https://issues.apache.org/jira/browse/SPARK-39465?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17554844#comment-17554844 ] 

Josh Rosen commented on SPARK-39465:
------------------------------------

Spark uses Log4J 2.x starting in Spark 3.3.0+; see SPARK-37814 

The migration from Log4J 1.x to Log4J 2.x is too large of a change for us to backport to existing Spark versions (see related discussion on another ticket).

As a result, if you want to use Log4J 2.x then you will need to upgrade to Spark 3.3.0.

The [Spark 3.3.0 release vote just passed yesterday|https://lists.apache.org/thread/zg6k1spw6k1c7brgo6t7qldvsqbmfytm], so the release should be published in the next couple of days. 

> Log4j version upgrade to 2.17.2
> -------------------------------
>
>                 Key: SPARK-39465
>                 URL: https://issues.apache.org/jira/browse/SPARK-39465
>             Project: Spark
>          Issue Type: Dependency upgrade
>          Components: Java API
>    Affects Versions: 3.2.1
>         Environment: Production 
>            Reporter: Chethan G B
>            Priority: Major
>
> Hi Team, 
> There were talks about upgrading log4j to latest version available as part of security fix.
> Wanted to know, if it is already upgraded.
>  
> Note: We are using  below dependencies,
>  
> <dependency>
>           <groupId>org.apache.spark</groupId>
>           <artifactId>spark-core_2.12</artifactId>
>           <version>3.0.1</version>
> </dependency>
> <dependency>
>           <groupId>org.apache.spark</groupId>
>           <artifactId>spark-sql_2.12</artifactId>
>           <version>3.0.1</version>
> </dependency>
> Kindly let us know when the log4j upgrade will be available for users ?



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org