Azure Synapse runtimes
Apache Spark pools in Azure Synapse use runtimes to tie together essential component versions such as Azure Synapse optimizations, packages, and connectors with a specific Apache Spark version. Each runtime will be upgraded periodically to include new improvements, features, and patches. When you create a serverless Apache Spark pool, you will have the option to select the corresponding Apache Spark version. Based on this, the pool will come pre-installed with the associated runtime components and packages. The runtimes have the following advantages:
- Faster session startup times
- Tested compatibility with specific Apache Spark versions
- Access to popular, compatible connectors and open-source packages
Supported Azure Synapse runtime releases
End of Support Notification for Azure Synapse Runtime for Apache Spark 2.4
- Effective September 29, 2023, the Azure Synapse will discontinue official support for Spark 2.4 Runtimes.
- Post September 29, we will not be addressing any support tickets related to Spark 2.4. There will be no release pipeline in place for bug or security fixes for Spark 2.4. Utilizing Spark 2.4 post the support cutoff date is undertaken at one's own risk. We strongly discourage its continued use due to potential security and functionality concerns.
- Recognizing that certain customers may need additional time to transition to a higher runtime version, we are temporarily extending the usage option for Spark 2.4, but we will not provide any official support for it.
- We strongly advise to proactively upgrade their workloads to a more recent version of the runtime (e.g., Azure Synapse Runtime for Apache Spark 3.3 (GA)).
The following table lists the runtime name, Apache Spark version, and release date for supported Azure Synapse Runtime releases.
|Runtime name||Release date||Release stage||End of life announcement date||End of life effective date|
|Azure Synapse Runtime for Apache Spark 3.4||Nov 21, 2023||Public Preview (GA expected in Q1 2024)|
|Azure Synapse Runtime for Apache Spark 3.3||Nov 17, 2022||GA (as of Feb 23, 2023)||Q1/Q2 2024||Q1 2025|
|Azure Synapse Runtime for Apache Spark 3.2||July 8, 2022||End of Life Announced (EOLA)||July 8, 2023||July 8, 2024|
|Azure Synapse Runtime for Apache Spark 3.1||May 26, 2021||End of Life Announced (EOLA)||January 26, 2023||January 26, 2024|
|Azure Synapse Runtime for Apache Spark 2.4||December 15, 2020||End of Life (EOL)||July 29, 2022||September 29, 2023|
Runtime release stages
For the complete runtime for Apache Spark lifecycle and support policies, refer to Synapse runtime for Apache Spark lifecycle and supportability.
Azure Synapse runtime for Apache Spark patches are rolled out monthly containing bug, feature and security fixes to the Apache Spark core engine, language environments, connectors and libraries.
- Maintenance updates will be automatically applied to new sessions for a given serverless Apache Spark pool.
- You should test and validate that your applications run properly when using new runtime versions.
Log4j 1.2.x security patches
Open-source Log4j library version 1.2.x has several known CVEs (Common Vulnerabilities and Exposures), as described here.
On all Synapse Spark Pool runtimes, we have patched the Log4j 1.2.17 JARs to mitigate the following CVEs: CVE-2019-1751, CVE-2020-9488, CVE-2021-4104, CVE-2022-23302, CVE-2022-2330, CVE-2022-23307
The applied patch works by removing the following files which are required to invoke the vulnerabilities:
While the above classes were not used in the default Log4j configurations in Synapse, it is possible that some user application could still depend on it. If your application needs to use these classes, use Library Management to add a secure version of Log4j to the Spark Pool. Do not use Log4j version 1.2.17, as it would be reintroducing the vulnerabilities.
The patch policy differs based on the runtime lifecycle stage:
- Generally Available (GA) runtime: Receive no upgrades on major versions (i.e. 3.x -> 4.x). And will upgrade a minor version (i.e. 3.x -> 3.y) as long as there are no deprecation or regression impacts.
- Preview runtime: No major version upgrades unless strictly necessary. Minor versions (3.x -> 3.y) will be upgraded to add latest features to a runtime.
- Long Term Support (LTS) runtime will be patched with security fixes only.
- End of life announced (EOLA) runtime will not have bug and feature fixes. Security fixes will be backported based on risk assessment.
Migration between Apache Spark versions - support
General Upgrade guidelines/ FAQ's:
Question: If a customer is seeking advice on how to migrate from 2.4 to 3.X, what steps should be taken?
Answer: Refer to the following migration guide: https://spark.apache.org/docs/latest/sql-migration-guide.html
Question: I get an error when I try to upgrade Spark pool runtime using PowerShell commandlet when they have attached libraries
Answer: Do not use PowerShell Commandlet if you have custom libraries installed in your synapse workspace. Instead follow these steps: -Recreate Spark Pool 3.3 from the ground up. -Downgrade the current Spark Pool 3.3 to 3.1, remove any packages attached, and then upgrade again to 3.3