Dzeri96 commented on PR #53290:
URL: https://github.com/apache/spark/pull/53290#issuecomment-3674648374

   While this is being merged, would you consider "setting 
`spark.io.compression.codec` to something other than lz4" as good advice for 
users potentially affected by the vulnerabilities?
   
   As far as I saw, only this config key has LZ4 as default. Also, it seems 
like `spark.eventLog.compression.codec` is its own setting, even though the 
former config key mentions it being used for writing event logs. I guess this 
is historic and an error in the docs?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to