Cloudera Docs

Cumulative hotfix CDP PvC Base 7.1.8.51-3 (Cumulative hotfix17)

Know more about the cumulative hotfix 17 for 7.1.8. This cumulative hotfix was released on November 23, 2023.

Following are the list of fixes that were shipped for CDP Private Cloud Base version 7.1.8-1.cdh7.1.8.p51.47413505

  • KT-7496: Gerrit PR is breaking with pre-commit build for KeyTrustee Keyprovider repo
  • CDPD-63823: kudu: Analyse compatibility report generated - between 7.1.8 CHF16 and CHF17
  • CDPD-63650: Fail early when encryption-at-rest init fails
  • CDPD-63646: Fix file descriptor leak when encryption-at-rest is enabled
  • CDPD-63574: disableLoadBalancingForUserAgents cannot be set
  • CDPD-63521: Atlas - Upgrade Spring Security to 5.7.10/5.8.5/6.0.5/6.1.2 due to CVE-2023-34034 and CVE-2023-34035
  • CDPD-63507: Backport IMPALA-11068 to 7.1.8 CHF
  • CDPD-63506: Backport IMPALA-12499 to 7.1.8 CHF
  • CDPD-63388: Back-port fix for KUDU-3476 into upcoming 7.1.8 CHF release
  • CDPD-63347: Backport CDPD-60975 to 7.1.8 CHFx , 7.1.9 CHFx
  • CDPD-63323: Dev work for CFM-3451 - Kafka Connect: check if all the necessary nars have been fully unpacked before starting a connector as scope of HOTFIX-5811 - 7.1.8 CHF 17 Release
  • CDPD-63322: Backport HBASE-25643 to 7.1.8 CHF17
  • CDPD-63309: [UnitTest] testMaterializationLookup failure: timestamp mismatch
  • CDPD-63306: Zeppelin - Upgrade netty to 4.1.100.Final due to CVE-2023-44487
  • CDPD-63301: SRM - Upgrade Jetty to 9.4.53/10.0.17/11.0.17 due to CVE-2023-40167, CVE-2023-36479, CVE-2023-41900, CVE-2023-36478 and CVE-2023-44487
  • CDPD-63288: Schema Registry - Upgrade jose4j to 0.9.3 due to CVE-2023-31582
  • CDPD-63180: Solr server unable to start after jetty upgrade to 9.4.53
  • CDPD-63123: Sqoop build is taking 6 hours to complete
  • CDPD-63057: Cruise Control - Upgrade netty to 4.1.100.Final due to CVE-2023-44487, CVE-2023-34462
  • CDPD-63037: Backport CDPD-62057 to 7.1.8 CHF17
  • CDPD-62982: [7.1.x] Ranger - Upgrade Json-Java to 20231013 due to CVE-2023-5072
  • CDPD-62976: Repetitive non-idempotent requests from Knox to Oozie causing Oozie system test failures - 7.1.8 CHFx
  • CDPD-62927: Schemaregistry - Upgrade JSON-Java to 20231013 due to CVE-2023-5072
  • CDPD-62841: SRM - Upgrade Armeria to 1.26.0 due to CVE-2023-44487
  • CDPD-62789: Atlas [7.1.8 CHFx] - Upgrade netty to 4.1.100.Final due to CVE-2023-44487
  • CDPD-62723: HSTS header missing from unsecured API in Ranger Admin
  • CDPD-62666: Ignore used undeclared jetty dependency in phoenix-connectors
  • CDPD-62607: [7.1.8 CHFx CLONE] - Upgrade Tomcat to 8.5.94+ (for CVE fixes) in all Ranger services
  • CDPD-62591: Hue - Upgrade Tomcat to 9.0.81 due to CVE-2023-41080 and CVE-2023-44487
  • CDPD-62508: CDPD - Upgrade netty to 4.1.100.Final due to CVE-2023-44487 and CVE-2023-34462
  • CDPD-62504: Ratis thirdparty - Upgrade netty to 4.1.100.Final due to CVE-2023-44487
  • CDPD-62503: Ozone - Upgrade netty to 4.1.100.Final due to CVE-2023-44487
  • CDPD-62502: Ranger - Upgrade netty to 4.1.100.Final due to CVE-2023-44487
  • CDPD-62173: Merge HIVE-24530 on all CDP-PvC 7.1.[7-9] CHFx versions
  • CDPD-62127: CDPD - Upgrade snappy-java to 1.1.10.4+ due to CVE-2023-43642
  • CDPD-62063: Backport HIVE-27728 to CDP.
  • CDPD-61741: Backport HIVE-22613 to CDP.
  • CDPD-61606: Potential dataloss from quick navigation during move op for S3 in Hue
  • CDPD-61577: CDPD - Upgrade Jetty to 9.4.53/10.0.17/11.0.17 due to CVE-2023-40167, CVE-2023-36479, CVE-2023-41900, CVE-2023-26048, CVE-2023-26049, CVE-2023-36478 and CVE-2023-44487
  • CDPD-59792: Fix of Backbone JS for Ranger UI on CDP 7.1.8 CHF
  • CDPD-58268: [7.1.8 CHFx] - Ranger Access Audit doesn't show callerContext in the audit as hover over button for HDFS audits
  • CDPD-57269: HADOOP-18763. Upgrade aws-java-sdk to 1.12.367
  • CDPD-56816: Multiple CVE follow-up for SMM
  • CDPD-55460: Impala - Upgrade Spring Framework to 5.3.27/6.0.8 due to CVE-2023-20863
  • CDPD-45383: Livy - Upgrade snakeyaml to 1.33 due to high CVEs
  • CDPD-41666: When Impala editor is not available then Hue importer fails
Table 1. Cloudera Runtime 7.1.8.51 (Cumulative Hotfix 17) download URL:
Parcel Repository Location 
https://[username]:[password]@archive.cloudera.com/p/cdh7/7.1.8.51/parcels/

Technical Service Bulletin

TSB 2024-775: FileNotFoundException for Ozone Filesystem JAR during or after CDP installation or upgrade
A potential availability issue has been found with services that have an Ozone client dependency on the ozone-filesystem-hadoop3 fat JAR file when upgrading the Cloudera Data Platform (CDP) Private Cloud Base cluster from version 7.1.8 to 7.1.9. This issue may also affect service installations, runs, and restarts during or after the CDP Private Cloud Base installation or upgrade.
The following exception appears on the Cloudera Manager User Interface (UI) or in the log files of the respective service when an installation, upgrade or other operations fail due to this issue: `java.io.FileNotFoundException: /path/to/ozone-filesystem-hadoop3-<version>.jar (No such file or directory).
The failure is caused by the broken symbolic link: /var/lib/hadoop-hdfs/ozone-filesystem-hadoop3.jar. This issue arises if the hdfs user already exists on the node before the Cloudera Runtime parcel activation. When the hdfs user already exists on the node, the Cloudera Manager agent skips the initialization related to Hadoop Distributed File System (HDFS), which includes creating the /var/lib/hadoop-hdfs directory. As the path is not created, the symbolic link cannot be created during the parcel activation process. This results in a series of broken symbolic links that point to the Ozone binaries.
Knowledge article
For the latest update on this issue see the corresponding Knowledge Article: TSB 2024-775: FileNotFoundException for the Ozone FS JAR during or after installation or upgrade