Ranger
You can review the list of reported issues and their fixes for Ranger in 7.3.1.200.
- CDPD-79911: Upgrade netty to 4.1.118.Final
- Ranger: Upgraded netty to 4.1.118.Final due to CVE-2025-24970, CVE-2025-25193.
- CDPD-79778: Issue in APPEND mode while writing Ranger audits to HDFS
- Ranger audits to HDFS currently use APPEND mode in case of errors or
exceptions encountered in writing audits to HDFS destination (to prevent large number of audit
files), and falls back to WRITE mode if unable to APPEND.
The issue is fixed now. A configuration parameter to enable APPEND mode while writing Ranger audits to HDFS is added.
- CDPD-79460: RMS full-sync breaks due to unsupported schema
- RMS supports HDFS and Ozone file-system in private cloud and S3 in public cloud. The
supported file schema types are hdfs, s3a, o3fs, and ofs. If Hive table location was stored at
other file-system which was not supported by the RMS, then full-sync threw exception, due to
unsupported schema. The full-sync was never completed.
This fix skips the unsupported file schema types while processing table and database metadata during full-sync and delta-sync in RMS. Therefore, table and database locations stored at other file-system, which is not supported by the RMS, are not mapped and appropriate messages are logged in RMS server log file.
- CDPD-78195: Enhance the audit generated in Ranger during data discovery call from REST Catalog API
- The audit generated in Ranger during data discovery call from the REST Catalog API is now enhanced. Calls such as list Databases / ListTables did not have the correct access Types and are enhanced to provide details on the operation.
- CDPD-77093: HBase scan operation returns denied columns in result
- In some cases, Ranger authorization returned access results of some HBase data even when
the user was not entitled to do so.
This issue is fixed now.
