My understanding is that we don’t need to do anything. Log4j2-core not used in spark.
> 2021年12月13日 下午12:45，Pralabh Kumar <pralabhku...@gmail.com> 写道： > > Hi developers, users > > Spark is built using log4j 1.2.17 . Is there a plan to upgrade based on > recent CVE detected ? > > > Regards > Pralabh kumar --------------------------------------------------------------------- To unsubscribe e-mail: dev-unsubscr...@spark.apache.org
