Log4j version upgrade to 2.17.2

Hi Team, 

There were talks about upgrading log4j to latest version available as part of security fix.

Wanted to know, if it is already upgraded.

Note: We are using  below dependencies,

 
<dependency>
          <groupId>org.apache.spark</groupId>
          <artifactId>spark-core_2.12</artifactId>
          <version>3.0.1</version>
</dependency>
<dependency>
          <groupId>org.apache.spark</groupId>
          <artifactId>spark-sql_2.12</artifactId>
          <version>3.0.1</version>
</dependency>
Kindly let us know when the log4j upgrade will be available for users ?