Fixed issues and resolved maintenance items for HDFS are addressed in Cloudera Runtime 7.3.2, its service packs and cumulative hotfixes.
Cloudera Runtime 7.3.2
Cloudera Runtime 7.3.2 resolves HDFS issues and incorporates fixes from
the service packs and cumulative hotfixes from 7.3.1.100 through 7.3.1.706. For a
comprehensive record of all fixes in Cloudera Runtime 7.3.1.x, see Fixed Issues.
- CDPD-75403: Local information disclosure in RunJar temporary
directory
- 7.3.2
- Previously, the temporary directories created by the
RunJar.run() command lacked restricted permissions by default. This
could allow other local users on the shared system to access sensitive files within
those directories. This issue is now resolved. The system now implements stricter access
controls on the RunJar working directory, ensuring that only the owner
has permission to access the contents.
- Apache JIRA:
HADOOP-19031
- CDPD-69173: FsImage contains inaccessible nodes due to
corruption
- 7.3.2
- Previously, corrupted FsImage files
could contain inaccessible nodes that the
FsImageValidation tool was
able to identify but not resolve.. This issue is now fixed. The
FsImageValidation tools is enhanced to remove the inaccessible nodes
during the validation of the INodeMap if it detects corruption.
- Apache JIRA:
HDFS-17380
- CDPD-88767: OpenSSL 3.x symbols are not loading
- 7.3.2
- Previously, Hadoop native code failed to link with
OpenSSL 3.x because specific symbols—
EVP_CIPHER_CTX_block_size and
EVP_CIPHER_CTX_encrypting—were removed from the library's public API.
This issue is now resolved. The native code is updated to use OpenSSL 3.x compatible
accessor functions, ensuring proper loading and linking.
- Apache JIRA:
HADOOP-18583
- CDPD-78928: Backport HADOOP-16299 to avoid module access
violation in LdapGroupsMapping
- 7.3.2
- Previously, when
LdapGroupsMapping was
the selected group mapping method, commands relying on this group mapping failed with a
Java module access violation on JVM version higher than Java11. This issue is now
resolved. The group mapping implementaion avoids illegal access while maintaining the
same functionality.
- Apache JIRA:
HADOOP-16299
- COMPX-20253: Missing Secure Sockets Layer (SSL) cipher inclusion list support
- 7.3.2
- Previously, support for configuring an inclusion list of SSL ciphers for HttpServer2
and SSLFactorywas missing. This issue is now resolved. When an inclusion list is set,
only the listed ciphers are allowed, and any cipher present in both the inclusion and
exclusion lists are excluded.
- Apache Jira:
HADOOP-19546
- COMPX-23154: Unecessary direct dependency on Jersey 1 and JSR311 APIs fro HTTP headers
- 7.3.2
- Previously, direct dependency on Jersey 1 jsr311 API for HTTP
header handling relied on the
javax.ws.rs.core.HttpHeaders class. This
issue is now resolved. All usages of javax.ws.rs.core.HttpHeaders are
replaces with internal constants or alternative classes, successfully removing the
direct dependency.
- Apache Jira:
HADOOP-19077
