Fixed Issues in Cloudera Runtime 7.2.17.1200
You can review the list of reported issues and their fixes in Cloudera Runtime 7.2.17.1200.
- CDPD-79237: Hive Metastore schema upgrade fails due to NULL values
- The upgrade script issues the following
command:
This fails because theALTER TABLE "DBS" ALTER COLUMN "TYPE" SET DEFAULT 'NATIVE', ALTER COLUMN "TYPE" SET NOT NULL;DBS.TYPEcolumn contains NULL values. These NULLs are introduced by canary databases created by Cloudera Manager, which insert entries in the HMS database without setting the TYPE. - CDPD-81709: Update
parquet-avroto 1.15.1 due to CVE-2025-30065 - Due to CVE-2025-30065, schema parsing in the
parquet-avromodule of Apache Parquet 1.15.0 and earlier versions allows bad actors to execute arbitrary code.To avoid this CVE, the
parquet-avromodule is upgraded to version 1.15.1. - CDPD-81756: Restrict trusted packages in the
parquet-avromodule - Due to CVE-2025-30065, schema parsing in the
parquet-avromodule of Apache Parquet 1.15.0 and earlier versions allows bad actors to execute arbitrary code.To prevent this CVE, users must specify all the trusted packages in the
org.apache.parquet.avro.SERIALIZABLE_PACKAGESenvironment variable. If the user does not want to specify the override property, then the following packages that are trusted by default are allowed —java.lang,java.math,java.io,java.net,org.apache.parquet.avro. - CDPD-82159: Issue with "After execution stop the interpreter" checkbox
- Fixed an issue with a checkbox that was preventing user interaction.
Fixed Common Vulnerabilities and Exposures
Common Vulnerabilities and Exposures (CVE) that are fixed in Runtime 7.2.17.1200:
- CVE-2024-1735 - Armeria
- CVE-2025-30065 - Apache Parquet
- CVE-2025-27553 - Apache Commons VFS
