Known issues in Cloudera Runtime 7.1.9 SP2 CHF 1

The following section lists the known issues and limitations, the areas of impact, and workaround for each Runtime component.

CDPD-106986: Node.js security vulnerability in Streams Messaging Manager UI on Red Hat 8

Streams Messaging Manager UI on Red Hat 8 includes an older Node.js runtime that is exposed to CVE-2025-23083, CVE-2025-23084, and CVE-2025-23085.

Upgrade to Cloudera Runtime 7.1.9 SP2 CHF 2.

CDPD-84457: Recon logs can be flooded by Negative usedBytes WARN messages in large Ozone clusters

Recon logs roll rapidly due to high retention rates, particularly in large clusters. Although Cloudera Runtime version 7.1.9 SP1 CHF17 includes a fix that prevents Datanodes from setting a negative usedBytes count, it does not resolve the state of containers that are already in that condition prior to upgrading.

To mitigate log flooding, turn off the specific logger in Cloudera Manager:

1. Sign in to Cloudera Manager.
2. In the left navigation, click Clusters.
3. Select the Ozone cluster and click Configuration.
4. Locate Ozone Recon Logging Advanced Configuration Snippet (Safety Valve).
5. Add the following entry:

   log4j.logger.org.apache.hadoop.ozone.recon.tasks.ContainerSizeCountTask=OFF

6. Click Save Changes.