Cloudera Runtime Release NotesPDF version

Fixed Issues in Cloudera Runtime 7.2.18.600

You can review the list of reported issues and their fixes in Cloudera Runtime 7.2.18.600.

CDPD-49032: Optimizing PART_COL_STATS queries with improved index order
Queries on the PART_COL_STATS table in the Hive Metastore were not utilizing the index effectively, leading to slower query performance.
The index order in the TAB_COL_STATS and PART_COL_STATS tables was modified to enhance query efficiency, ensuring better utilization of the database index.

Apache Jira: HIVE-27165

CDPD-62654: Improved efficiency for altering multiple Hive partitions
The Hive Metastore sent separate AlterPartitionEvent messages for each partition during bulk updates, causing inefficiencies in processing and event handling.
The Metastore now sends a single AlterPartitionsEvent containing a list of partitions when bulk updates are performed. To enable this batched event, set metastore.alterPartitions.notification.v2.enabled to true in the Hive Metastore configuration. This change improves efficiency by reducing the number of events processed. Backward compatibility is maintained for clients using the older ALTER_PARTITION event format.

Apache Jira: HIVE-27746

CDPD-75988: JSON-smart library upgraded to address security vulnerability
CVE-2023-1370 was present in the older version of json-smart.
The json-smart library was upgraded to version 2.4.10
CDPD-73427: Upgrade Spring Framework to resolve vulnerabilities
CVE-2024-38808: Vulnerable to resource exhaustion through user-supplied SpEL expressions.
CVE-2024-38809: DoS attack possible due to improper ETag validation in HTTP requests.
Upgraded Spring Framework to versions 6.1.12, 6.0.23, or 5.3.39 to mitigate these issues.
CDPD-76229: Backport [SPARK-45071][SQL] Optimize the processing speed of BinaryArithmetic#dataType when processing multi-column data
Restoring performance of some queries in Spark 3.4.1 to match other versions (3.3.x, 3.5.x) of Spark.

[SPARK-49789] Optimize the processing speed of `BinaryArithmetic#dataType` when processing multi-column data

Apache Jira: SPARK-45071

CDPD-74730: Backport SPARK-46239: Hide the Jetty server's version
Jetty server's version is now hidden.
CDPD-73233: org.apache.spark.SparkUnsupportedOperationException: [ENCODER_NOT_FOUND] Not found an encoder of the type T to Spark SQL internal representation
Backporting a fixed for an upstream regression which has been fixed in Spark 3.4.2

[SPARK-49789] org.apache.spark.SparkUnsupportedOperationException: [ENCODER_NOT_FOUND] Not found an encoder of the type T

Apache Jira: SPARK-49789

CDPD-74114: Proxyuser groups are not included in POST and PATCH requests
Fixed an issue where group headers were not added to POST and PUT requests.
CDPD-75383: Ranger Audit Filter for the HBase service is not working as expected
From the UI perspective, while creating services configuring the Audit Filter resources, incorrect values were set for the 'Include' and 'Exclude' flag setup. This issue has now been resolved and is tracked in this Jira ticket.
Apache Jira: RANGER-4983
CDPD-75940: Spark Iceberg vectorized Parquet read of decimal column is incorrect
When using Spark vectorized read of Iceberg tables with Parquet files (enabled by default), decimal columns may be read incorrectly. This issue occurs when reading a Parquet decimal column chunk with multiple pages where some of the pages are dictionary encoded.

This issue is now fixed.

CDPD-69265, CDPD-71074: Hue startup failure resolved on the FIPS-enabled clusters
In the FIPS-enabled clusters, Hue startup failure occurred due to the use of the psycopg2-binary package, which includes an OpenSSL version incompatible with FIPS requirements. The issue now can be resolved by removing the psycopg2-binary package and installing psycopg2 along with its necessary dependencies.
CDPD-76661: RMS server throws ConcurrentModificationException
The original ConcurrentModificationException is likely thrown when the resource-mappings are modified in response to changes in the Hive metadata while they are being serialized for downloading to the NameNode (or secondary-namenode).
The fix is to create a shallow copy of resource-mappings before applying deltas which ensures that resource-mappings are not modified while they are being serialized for downloading to the NameNode.
Fixed Common Vulnerabilities and Exposures

Common Vulnerabilities and Exposures (CVE) that are fixed in Runtime 7.2.18.600:

CVEs Package Name
CVE-2021-47621 Classgraph
CVE-2017-7525 Jackson-mapper-asl
CVE-2019-10172 Jackson-mapper-asl
CVE-2023-51775 Jose4j

We want your opinion

How can we improve this page?

What kind of feedback do you have?