topic Re: log4j vulnerability - action plan for clients in Data Engineering

log4j vulnerability - action plan for clients

pawelmitrus — Mon, 13 Dec 2021 09:54:27 GMT

I'm looking for some information regarding log4j vulnerability - if any databricks runtime should be changed manually by the client or when specific update will be applied.

I know I can go through the docs by myself, finding out which log4j library is used in runtimes (and I did), but I'm wondering if there will be any note centrally released/announced?

EDIT: it's not only with regarding to databricks runtime, but also to API calls to Databricks API.

Re: log4j vulnerability - action plan for clients

-werners- — Mon, 13 Dec 2021 10:06:17 GMT

These topics will give you an answer (especially the first one which is answered by Databricks)

https://community.databricks.com/s/feed/0D53f00001YOOVxCAP

https://community.databricks.com/s/feed/0D53f00001Y5MhTCAV

Re: log4j vulnerability - action plan for clients

Prabakar — Tue, 14 Dec 2021 10:53:47 GMT

Hi @pawelmitrus Please go through the blog for further information on the Apache Log4J Vulnerability issue.

Re: log4j vulnerability - action plan for clients

Mr_Srinivasa — Mon, 14 Nov 2022 12:33:37 GMT

Thanks for sharing such important facts. I got the best security service provider website on the internet. They are excellence in the field of security.