Cloudera Docs

Fixed Issues in Cloudera Runtime 7.2.18.1200

You can review the list of reported issues and their fixes in Cloudera Runtime 7.2.18.1200.

CDPD-105107: Improved exception handling for RAZ GCP HMAC keys
Resolved an issue in the RAZ GCP HMAC key generation lifecycle by ignoring transient storage exceptions and retrying key retrieval a few times, and improved related logging. This makes HMAC key creation and deletion more reliable for GCP RAZ integrations.
CDPD-95415: Security vulnerability related to Apache Tika
This fix addresses a critical XML External Entity (XXE) vulnerability, as described in CVE-2025-66516, in the Apache Tika core and parser modules. This vulnerability could be exploited by using a crafted XFA file within a PDF document.
CDPD-92863/ CDPD-74680: Hive query execution failure due to AM container exit on lost node with Exit code -100
Hive query failed when ApplicationMaster container was lost.
Previously, when running a Hive query, a failed ApplicationMaster (AM) container did not trigger a DAG retry and caused the query execution to fail if the failure message included diagnostic information with a line break.
This issue is now resolved by automatically re-executing the DAG if the AM fails.

Apache Jira: HIVE-28093

CDPD-77905: MRCompactor causes data loss during major compaction
During a major compaction, records matching certain conditions were lost due to incorrect handling in MRCompactor.
The issue was addressed by ensuring that all records are correctly preserved during major compaction.

Apache Jira: HIVE-28700

CDPD-95900: MRCompactor causes data loss during major compaction
During a major compaction, records matching certain conditions were lost due to incorrect handling in MRCompactor.
This has now been fixed.

Apache Jira: HIVE-28700

CDPD-93519: Duplicate records during minor compaction
Previously, when the Hive Metastore (HMS) crashed, active compaction jobs were incorrectly reset.
This issue is now fixed by updating the compactor cleaner to address duplicate directories.

Apache Jira: HIVE-29210

CDPD-93293: Data loss during minor compaction
Previously, query-based minor compaction incorrectly used the minimum open write ID as a lower bound for selecting data files.
This issue is now fixed by removing the incorrect check against the minimum open write ID, allowing the high-watermark to correctly define the compaction range.

Apache Jira: HIVE-29272

CDPD-104785: Arbitrary file read on Hue hosts through the localfile importer feature
Previously, a local file inclusion vulnerability existed on the Hue host type through the localfile importer feature. This occurred because two indexer API endpoints accepted unvalidated paths, allowing unauthorized file reads through the path parameter. This issue is now fixed.
CDPD-96460: Impala query profile row count display error
Previously, the Hue Impala editor component displayed incorrect row count values for large tables because it incorrectly parsed the RowsReturned metric property from the EXCHANGE node component inside the Impala query profile log. This issue is fixed by implementing a threshold-based bucketing approach that displays approximate row count indicators, such as 1000+ rows or 10000+ rows, to prevent inaccurate query metadata displays.
CDPD-94474: Kudu tablet server crashes on RHEL 9
Previously, Kudu tablet servers crashed on Red Hat Enterprise Linux 9 (RHEL 9) x86_64 platforms when the libgcc package was updated to version 11.5.0-11 or newer. These crashes typically manifested as a Segmentation Fault (SIGSEGV) or an Abort (SIGABRT) error under specific workloads. This issue is now resolved.

Apache Jira: KUDU-3736

CDPD-98930: Kudu master startup failure due to certificate signing version check errors
Previously, during Kudu master startup, a runtime error occurred indicating a certificate signature verification failure: failed to self-sign cert: CSR signature verification error: error:05800091:x509 certificate routines::unsupported version. This occurred because newer OpenSSL versions introduced stricter version checking for certificate signing, causing Certificate Signing Requests without an explicitly set version to fail verification. This issue is now resolved by setting the version on the CSR during the generation phase, ensuring compatibility with OpenSSL version 3.4.0 and later versions and allowing the Kudu master to start successfully.

Apache Jira: KUDU-3716

CDPD-98883: Incorrect memory budgeting condition
Previously, the merge rowset compaction process experienced memory budgeting failures because the budgeting logic directly compared the actual on-disk delta size value in bytes against the minimum size threshold value defined in megabytes. This mismatch prevented the system from correctly evaluating whether to apply memory budgeting configuration settings. This issue is now fixed by converting the minimum size threshold value from megabytes to bytes before performing the sizing comparison.

Apache Jira: KUDU-3406

CDPD-97140: Range partition recreation for specific table schemas
Previously, dropping and immediately adding back the same range partition failed for certain table schemas. This issue occurred because the system catalog did not correctly normalize range-specific hash schemas when they matched the table-wide hash schema. This lack of normalization caused inconsistencies in how the partition information was stored and interpreted. This issue is now fixed. Kudu now correctly normalizes and stores range partition specifications, ensuring that partitions can be recreated as expected.

Apache Jira: KUDU-3723

Fixed Common Vulnerabilities and Exposures
The Common Vulnerabilities and Exposures (CVEs) that are fixed in this release are: