https://community.databricks.com/t5/data-engineering/www-lunasec-io/m-p/33211#M24274 <P>Log4J: part 2</P><P></P><P>Apparently log4j 2.15 is still vulnerable:</P><P><A href="https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/" alt="https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/" target="_blank">https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/</A></P><P>So beter use version 2.16.</P><P></P><P>But as mentioned in several topics: Databricks does not use an impacted version.</P> Wed, 15 Dec 2021 09:16:07 GMT -werners- 2021-12-15T09:16:07Z https://community.databricks.com/t5/data-engineering/www-lunasec-io/m-p/33211#M24274 <P>Log4J: part 2</P><P></P><P>Apparently log4j 2.15 is still vulnerable:</P><P><A href="https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/" alt="https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/" target="_blank">https://www.lunasec.io/docs/blog/log4j-zero-day-update-on-cve-2021-45046/</A></P><P>So beter use version 2.16.</P><P></P><P>But as mentioned in several topics: Databricks does not use an impacted version.</P> Wed, 15 Dec 2021 09:16:07 GMT https://community.databricks.com/t5/data-engineering/www-lunasec-io/m-p/33211#M24274 -werners- 2021-12-15T09:16:07Z