Fixed Issues in Cloudera Runtime 7.2.17.1200
You can review the list of reported issues and their fixes in Cloudera Runtime 7.2.17.1200.
- CDPD-79237: Hive Metastore schema upgrade fails due to NULL values
- The upgrade script issues the following
command:
This fails because theALTER TABLE "DBS" ALTER COLUMN "TYPE" SET DEFAULT 'NATIVE', ALTER COLUMN "TYPE" SET NOT NULL;
DBS.TYPE
column contains NULL values. These NULLs are introduced by canary databases created by Cloudera Manager, which insert entries in the HMS database without setting the TYPE. - CDPD-81709: Update
parquet-avro
to 1.15.1 due to CVE-2025-30065 - Due to CVE-2025-30065, schema parsing in the
parquet-avro
module of Apache Parquet 1.15.0 and earlier versions allows bad actors to execute arbitrary code.To avoid this CVE, the
parquet-avro
module is upgraded to version 1.15.1. - CDPD-81756: Restrict trusted packages in the
parquet-avro
module - Due to CVE-2025-30065, schema parsing in the
parquet-avro
module of Apache Parquet 1.15.0 and earlier versions allows bad actors to execute arbitrary code.To prevent this CVE, users must specify all the trusted packages in the
org.apache.parquet.avro.SERIALIZABLE_PACKAGES
environment variable. If the user does not want to specify the override property, then the following packages that are trusted by default are allowed —java.lang
,java.math
,java.io
,java.net
,org.apache.parquet.avro
. - CDPD-82159: Issue with "After execution stop the interpreter" checkbox
- Fixed an issue with a checkbox that was preventing user interaction.
Fixed Common Vulnerabilities and Exposures
Common Vulnerabilities and Exposures (CVE) that are fixed in Runtime 7.2.17.1200:
- CVE-2024-1735 - Armeria
- CVE-2025-30065 - Apache Parquet
- CVE-2025-27553 - Apache Commons VFS