Fixed issues in Cloudera Runtime 7.1.9 SP2 CHF 5
Know more about the cumulative hotfix 5 for 7.1.9 SP2. This cumulative hotfix was released on October 06, 2026.
Following are the list of fixes that were shipped for CDP Private Cloud Base version 7.1.9-1.cdh7.1.9.p20500.83735026.
- CDPD-121842: Atlas High Availability cannot start in passive mode and the web UI returns a 503 error
- Previously, in an Atlas High Availability (HA) deployment, the passive Atlas instance intermittently failed to start and the Atlas web UI returned an HTTP 503 error, while the active instance continued to work as expected. The failure was timing-dependent and did not occur on every startup. When the failure occurred, the Atlas server log recorded a NoClassDefFoundError: org/apache/commons/lang/UnhandledException during JanusGraph global configuration startup after commons-lang 2.x was removed from the Atlas server classpath.
- CDPD-122698: Intermittent 403 Forbidden errors during Knox startup or concurrent request initialization
- Due to a concurrency timing issue in
RangerPDPKnoxFilter, initial concurrent requests or multiple Knox topologies could access an uninitializedKnoxRangerPlugininstance before its policy engine finished loading, resulting in intermittent403 Forbiddenauthorization failures. This issue has been resolved by ensuring the Ranger plugin instance is fully initialized before it is made available to process incoming requests.
Common Vulnerabilities and Exposures (CVE) that is fixed in this CHF:
- CVE-2022-39135 - Apache Calcite
- CVE-2026-27459 - pyOpenSSL
