Apache Spark 2.x — End of Life
EOLApache Spark 2.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status |
|---|---|---|---|---|---|
| 2.4LTS | Oct 29, 2018 | — | May 9, 2021 | 2.4.8 | EOL |
| 2.3 | Feb 22, 2018 | — | Aug 25, 2019 | 2.3.4 | EOL |
| 2.2 | Jun 30, 2017 | — | Jan 30, 2019 | 2.2.3 | EOL |
| 2.1 | Dec 15, 2016 | — | Jun 26, 2018 | 2.1.3 | EOL |
| 2.0 | Jul 19, 2016 | — | Dec 15, 2016 | 2.0.2 | EOL |
CVEs affecting Apache Spark 2.x (0)
Apache Spark 2.x is EOL — migrate to Apache Spark 3.x
Apache Spark 3.x is the next major release. Plan your upgrade before Apache Spark 2.x stops receiving security patches.
Frequently asked questions
Is Apache Spark 2 end of life?
Yes. All Apache Spark 2.x releases have reached end of life and no longer receive security patches. Migrate to Apache Spark 3.x as soon as possible.
What CVEs affect Apache Spark 2?
No CVEs are currently tracked for Apache Spark 2.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.
What is the latest Apache Spark 2 version?
The latest Apache Spark 2.x patch release is 2.4.8, released on May 9, 2021. Always run the latest patch to benefit from all security fixes.
How to migrate from Apache Spark 2 to Apache Spark 3?
To migrate from Apache Spark 2 to Apache Spark 3: (1) review the official Apache Spark 3 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Apache Spark 2 in production?
No. Apache Spark 2 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA