'Release date for Apache Spark 3.3
Does anyone know the release date for Apache Spark 3.3 ? We have log4j vulnerability reported in Apache Spark 3.2.1 version and want to see if the next patch is going to fix it or not.
Regards, VM
Solution 1:[1]
3.3 seems to have gone through some delays but should enter the RC process soon.
Release cadence details are (as of this answer) listed on the Versioning Policy page at https://spark.apache.org/versioning-policy.html
Currently you'll see the following at the bottom:
Spark 3.3 release window
| Date | Event |
|---|---|
| March 15th 2022 | Code freeze. Release branch cut. |
| Late March 2022 | QA period. Focus on bug fixes, tests, stability and docs. Generally, no new features merged. |
| April 2022 | Release candidates (RC), voting, etc. until final release passes |
So you now know as much as I do. If you want to know more you can follow the mailing list: https://lists.apache.org/[email protected]
If you're by chance using Spark on Databricks, though, they typically release feature updates in the runtime releases before they go to RC in the OSS version.
You mentioned a vulnerability in log4j... CVE-2021-44832 should not exist in the current release Spark 3.2.1. Can you provide more details on what you're seeing in your vulnerability report?
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | Ron DeFreitas |