Please follow the upgrade instructions for minor upgrades to replace the vulnerable HDP and Ambari bits. The instruction for updating the JDBC driver (affected by this vulnerability) can be followed here.

The bits are built on top of the GA’d HDP 2.6.5.0 and Ambari 2.6.2.0 with log4j-2.16.0 on top.

HDP bits are built on top of the GA’d HDP 2.6.5.0 with log4j-2.16.0 and the Ambari bits include 2.6.20 plus all cumulative fixes so far including log4j-2.16.0. For more information, see Fixed Issues for Ambari 2.6.2.64

Known Issue : SmartSense View cannot be used.