Fixed issues in Cloudera Runtime 7.1.9 SP2 CHF 3

Know more about the cumulative hotfix 3 for 7.1.9 SP2. This cumulative hotfix was released on Sep 10, 2026.

Following are the list of fixes that were shipped for CDP Private Cloud Base version 7.1.9-1.cdh7.1.9.p20300.82588920.

CDPD-110008: Ozone EC offline reconstruction could result in data loss due to premature scrubbing of idle RECOVERING containers.

Previously, data loss occurred during EC offline reconstruction when idle RECOVERING containers were scrubbed and auto-recreated as partial CLOSED replicas. This issue is now fixed.

Apache JIRA: HDDS-15791

CDPD-111243: Recon Storage Container Manager database stops after a snapshot swap

Previously, when Recon swapped in a downloaded Storage Container Manager (SCM) database snapshot, it renamed the snapshot directory while the database was still open. A later write failed with a background I/O error and the database shut down, after which all Recon SCM background tasks failed because the database was closed.

This issue is now resolved. Recon closes the database before renaming the snapshot directory, so the SCM database remains available and the background tasks continue to run.

CDPD-108882: Recon fails to download large Ozone Manager database snapshots

Previously, Recon downloaded the full Ozone Manager (OM) database snapshot as a single large tar stream. If the transfer was interrupted, for example by an OM or Recon restart or by a proxy, load balancer, or network timeout, Recon received an incomplete stream and failed with a premature end-of-file error.

This issue is now resolved. Recon downloads the snapshot as multiple bounded tarballs and excludes the already-downloaded files from subsequent requests, which makes the transfer reliable for very large databases.

Apache JIRA: HDDS-15766

CDPD-104171: Ozone quota repair CLI ignored the bucket list parameter

Previously, when using the Ozone quota repair CLI with the --buckets option to repair specific buckets, the Ozone Manager client failed to include the specified bucket list in the request. This caused the Ozone Manager to perform a full cluster quota repair instead of a scoped repair for the specified buckets. This issue is now resolved, and the quota repair now correctly targets only the specified buckets.

Apache JIRA: HDDS-15199

CDPD-84457: Recon logs can be flooded by Negative usedBytes WARN messages in large Ozone clusters

Previously, in Ozone Recon, frequent “Negative usedBytes … treating it as 0” messages were logged at the WARN level and could flood Recon logs in large clusters. This issue has been fixed now.

Apache JIRA: HDDS-13220

CDPD-100716: Reading keys results in a NO_REPLICA_FOUND error after SCM follower restart and leader transfer

Previously, after a follower Storage Container Manager (SCM) restarted, it began accepting DataNode container reports before it finished catching up with the Ratis log. Containers whose state changed during the restart remained stale, and reading a key whose container was closed during the restart failed with a NO_REPLICA_FOUND error.

This issue is now resolved. A follower SCM delays starting its DataNode server until it catches up with the Ratis log, so the container states are current and the key reads succeed.

Apache JIRA: HDDS-14989

CDPD-80263: Ozone S3 Gateway failed to handle checksum trailers in AWS SDK requests

Previously, Ozone S3 Gateway (S3G) did not support the default data integrity protections introduced in newer versions of AWS SDKs (such as Boto3 1.36.0+ and AWS Java SDK V2 2.30.0+). This caused S3 PutObject and UploadPart requests to either fail or silently append checksum trailer data (example, x-amz-trailer) to the request body, leading to unexpected behavior or corrupted uploads. This issue is now resolved, and S3G is updated to correctly handle signature calculations and request processing when checksum trailers are present.

Apache JIRA: HDDS-12488

CDPD-98087: Performance degradation in SCM listContainer API at scale

Previously, the StorageContainerLocationProtocol.listContainer() API experienced significant performance degradation when handling a large number of containers (200K+). Excessive RPC payloads and per-container lock acquisition caused high CPU usage on the Storage Container Manager (SCM) and slowed Recon sync operations. This issue is now resolved.

Apache JIRA: HDDS-14730

CDPD-82447: S3 Gateway signature validation failed for HTTPS chunked uploads

Previously, PutObject and other AWS SDK v2 requests failed with signature mismatch errors when using HTTPS endpoints with chunked uploads. This occurred because the S3 Gateway incorrectly calculated the canonical request signature for payloads using STREAMING-UNSIGNED-PAYLOAD-TRAILER. This issue is now resolved by correctly handling the signature validation for these request types.

Apache JIRA: HDDS-12935

CDPD-78201: Ozone S3 Gateway PutObject operations failed when using AWS CLI version 1.37.0 or later over HTTPS

Previously, uploading files to the Ozone S3 Gateway using AWS CLI version 1.37.0 or later failed with an internal server error (HTTP 500) when using the HTTPS endpoint. This was caused by the S3 Gateway not correctly handling the new default upload mode in the AWS CLI, which included unsigned chunked uploads with trailers (STREAMING-UNSIGNED-PAYLOAD-TRAILER). This issue is now resolved by updating the S3 Gateway to support signature calculation with trailers and unsigned chunked uploads.

Apache JIRA: HDDS-12123

CDPD-102464: ZooKeeper configuration properties logged without redaction

Previously, ZooKeeper configuration properties were recorded in plain text, potentially exposing sensitive data within the logs.

This issue is now resolved by implementing a log redaction method to ensure that all sensitive values are appropriately masked during the logging process.

CDPD-111490: The events-skipped metric reported inaccurate counts

Previously, the catalog events-skipped metric counted only the skipped create and drop events on databases, tables, and partitions that its description listed. The catalog also incremented the metric for other cases, such as reload events, alter partition events, and events on tables in the block list, so the reported count did not match the description and was misleading when you monitored catalog event processing.

This issue is now resolved. The metric is aligned with every case in which the catalog skips an event, so the events-skipped count accurately reflects all skipped events.

Apache Jira: IMPALA-12771

CDPD-104785: Arbitrary file read on Hue hosts through the localfile importer feature

Previously, a local file inclusion vulnerability existed on the Hue host type through the localfile importer feature. This occurred because two indexer API endpoints accepted unvalidated paths, allowing unauthorized file reads through the path parameter. This issue is now fixed.

CDPD-102463: Reverse DNS lookup in TLS client and server

Previously, ZooKeeper performed reverse DNS lookups during TLS handshakes in both the client and server, which introduced a high security vulnerability.

This issue is now resolved. Reverse DNS lookup is now disabled in the ZooKeeper TLS client and server.

Apache Jira - ZOOKEEPER-4986

There are no Common Vulnerabilities and Exposures (CVE) fixed in this CHF.