Bug Fixes

ODP-4852

Fixed XML template handling to correctly escape special characters.

ODP-4802

Fixed Hive Service Check failure in 3.3.6.2-1 clusters.

ODP-4781

Fixed JCEKS warnings in non-SSL environments for Kafka, Cruise Control, and MirrorMaker2.

ODP-4488, ODP-4721

Fixed alerts and updated oozie.base.url property to auto-update when SSL is enabled.

ODP-4768

Removed duplicate SSL keystore.password entry to avoid client failures.

ODP-4725 (addendum)

Added default hive.perflogger.log.level property set to INFO.

ODP-4734

Fixed Knox installation failure with standalone services.

ODP-4683, ODP-4568

Enhanced MirrorMaker2 to support multi-topology, mm2-env, and JAAS integration.

ODP-4695

Fixed handling of multiple jersey-json versions in classpath.

ODP-4680

Added SSL config handler to apply settings only when SSL is enabled.

ODP-4687

Fixed secure logging for HDFS DataNode.

ODP-4681

Fixed ZooKeeper UI quicklinks in http_only mode.

ODP-4656

Fixed Step 2 blocking issue during manual KDC setup in Ambari.

ODP-4592

Added default value for Hive keystore password.

ODP-4630

Created parent directory automatically for JCEKS files.

ODP-4642

Fixed Hive Service Check failure in 3.3.6.2-1 clusters.

ODP-4631

Changed Zeppelin default URL from /next to / to match version 0.12.0 changes.

ODP-4483

Reverted Hive and Tez hook configurations for Pulse.

ODP-4529

Changed admin.serverPort to 8070 to avoid conflict with Ambari Web UI port 8080.

ODP-3396

Updated udp_preference_limit to 1 and set default kdc_timeout in HA environments.

ODP-4283

Fixed exposed Hive SSL credentials.

ODP-4480

Fixed checkstyle issues and RAT license failures.

ODP-4484

Updated Ambari submodule from SNAPSHOT to release version.

ODP-4431

Added Hive SSL properties to hive-site.xml.

ODP-4413

Added Kafka MirrorMaker2 support for multiple topologies.

ODP-4406

Set Yarn HA enabled property type to boolean.

ODP-4772

Included slf4j-api version 1.7.36 to resolve logging conflicts with SLF4J 2.x.

ODP-4673

Reverted Jetty version to 9.4.44.v20210927.

ODP-4772

Included slf4j-api version 1.7.36 to resolve logging conflicts with SLF4J 2.x.

ODP-4673

Reverted Jetty version to 9.4.44.v20210927.

ODP-4277

Made changes to use internal versions of components.

ODP-3161

Updated the Hive version to 4.0.1.

ODP-4816

Modified HiveMetaStoreClient and HiveConf to match Hive 4.0.1.3.3.6.2-1.

ODP-4766

Skips the Debian files for RAT checks.

ODP-4277

Fixed the compile issues with enforcer enablement and handling ODP internal versions.

HBASE-29317

Upgraded hbase-thirdparty to 4.1.11. (apache#6993) (apache#7043)

ODP-4518

Fixed the Hue compile issue with pip.

ODP-4445

Added the required files for packaging.

ODP-4348

Prevents copying the global Python packages into the virtual environment.

ODP-4505

Upgraded pubsub-group-kafka-connector to version 1.3.2 to fix CVE-2023-2976, CVE-2020-8908, and CVE-2024-7254.

ODP-4499

Upgraded mongo-kafka to version 2.0.0 to address multiple CVEs.

ODP-2749

Upgraded protobuf-java and commons-io to address CVE-2024-7254 and CVE-2024-47554 (KAFKA-17768).

ODP-1866

Updated handling for /images, login.jsp, and other modified Ranger service definitions.

ODP-4362

KNOX-2940

Fixed knoxcli create-alias commands to support values starting with a dash.

ODP-4362

KNOX-3012

Fixed DataNode links on the Ozone SCM UI.

ODP-4362

KNOX-2958

Fixed API samples for certain services.

ODP-4362

KNOX-2915

Added reloadDescriptors() when starting monitors.

ODP-4362

KNOX-2915

Reloaded descriptors before topology redeployment at startup.

ODP-4362

KNOX-3021

Ensured HTTP configuration is also applied to non-SSL Jetty connectors.

ODP-4362

KNOX-3024

Fixed Java detection issues.

ODP-4362

KNOX-3030

Made TopologyUtils.parse thread-safe.

ODP-4362

KNOX-2996

Added proxy for HDFS UI network topology.

ODP-4362

KNOX-3012

Fixed DataNode links on the Ozone SCM UI.

ODP-4514

KUDU-3491

Fixed random MiniDumpExceptionHandler assertion failures when starting a newly added Kudu master.

KUDU-3661

Fixed issue where Ranger policies were not honored in Kudu.

KUDU-3491

Ensured the master is destructed before creating a new one.

ODP-4716

Added handling for empty keystore path.

ODP-4679

Fixed NoClassDefFoundError issue during Livy startup.

ODP-4456

Updated Spark 3 source/bin URLs for standalone tarballs for Livy3 and Zeppelin.

ODP-4277

Added Spark 3 tarball link to download ODP-specific version.

ODP-4277

Matched ODP component version.

ODP-4351

Updated Spark version to 3.5.5.3.3.6.2-1.

ODP-2795

Refactored Livy to use ambari-python-wrap.

ODP-3913

Changed distribution management to point to staging repository.

ODP-3912

Added Acceldata staging repository.

ODP-3593

Fixed CVE-2025-24970 (io.netty:netty-codec-http2:4.1.108.Final).

ODP-3473

Removed hadoop-shaded-protobuf from Livy.

ODP-3475

Matched protobuf version in Livy with Spark.

ODP-3479

Fixed sonatype-2015-0002 vulnerability in collections:20040616.

ODP-3469

Removed references to Avro.

ODP-3544

Fixed CVE-2024-53990 by upgrading asynchttpclient to 3.0.1.

ODP-3478

Fixed CVE-2020-25638 by removing org.hibernate:hibernate-core.

ODP-3481

Fixed sonatype-2023-4380 (io.netty:netty-codec-http2:4.1.94.Final) — matched Spark version to 4.1.108.

ODP-3489

Fixed sonatype-2022-6438 by bumping jackson-core to 2.15.4.

ODP-3475

Removed com.google.protobuf:protobuf-java:2.5.0 from spark-hive_ in Livy.

ODP-3487

Fixed CVE-2022-34169 in xalan:xalan:2.7.2.

ODP-3470

Removed org.apache.thrift:libthrift:0.9.3 (libfb303) to address CVE-2018-1320.

ODP-3485

Bumped metrics version to 4.2.30.

ODP-3486

Fixed CVE-2024-29857 by removing bouncycastle:bcprov-jdk18on:1.77.

ODP-3480

Fixed CVE-2024-52046 by excluding mina-core test jars.

ODP-3465

Fixed CVE-2022-22965 in org.springframework:spring-beans:4.3.19.RELEASE (duplicate fix entries consolidated).

ODP-3464

Fixed CVE-2020-10683 in dom4j:dom4j:1.6.1.

ODP-3480

Fixed CVE-2024-52046 in org.eclipse.jetty:jetty-runner:9.4.50.v20221201.

ODP-2050

Fixed jetty-webapp version.

ODP-2050

Fixed guava version.

ODP-4272

Fixed NiFi/NiFi Registry service check for JDK 11 compatibility.

ODP-4654

Resolved NiFi service start failure (java.lang.ClassNotFoundException: org.apache.nifi.toolkit.encryptconfig.EncryptConfigMain).

ODP-4991

NIFI-14057

Return HTTP 405 for TRACE and OPTIONS on all paths for ListenHTTP (apache#9563).

ODP-4729

Fixed missing Jackson dependency in NiFi Registry.

ODP-4647

HDDS-11617

Fixed SCM service startup failure caused by protobuf incompatibility.

ODP-4750

Set protobuf-java version to 3.25.5 in Ozone.

ODP-4277

Avoided Kafka 2 & 3 dependency convergence errors and added distribution management.

ODP-4814

Fixed null handling on the Zookeeper Browser page.

ODP-4796

Fixed Guava version ambiguity caused by Dropwizard upgrade.

ODP-4631

Excluded Jackson 2.14.1 from Glassfish to avoid conflicts.

Reverted patch for CVE-2022-1471 related to org.yaml_snakeyaml (OSV-3131 / OSV-3118).

Addressed CVE-2023-5072 in org.json_json (OSV-3120 / OSV-3121).

Addressed CVE-2022-1471 in org.yaml_snakeyaml (OSV-3131 / OSV-3118).

Addressed CVE-2023-31582 in org.bitbucket.b_c_jose4j 0.7.9 (OSV-3132).

Addressed CVE-2024-1597 in org.postgresql_postgresql 42.4.1 (OSV-3134).

Addressed CVE-2023-1370 in net.minidev_json-smart 2.4.8 (OSV-3125).

Addressed CVE-2025-48734 in commons-beanutils_commons-beanutils 1.9.4 (OSV-3122).

Addressed CVE-2024-22201 in org.eclipse.jetty_jetty-io 9.4.48 (OSV-3126 to OSV-3129).

ODP-4296

Fixed exposure of database passwords via REGISTRY_DB_PASSWORD environment variable.

ODP-4277

Fixed staging URL accessibility and aligned Kafka Ranger versions.

ODP-4858

Fixed Hudi/Delta SQL query issues caused by ANTLR version conflict.

ODP-780

Updated libthrift from 0.12.0 to 0.14.1 for Hive 3.1.4 connectivity.

ODP-1603

Fixed Could not initialize class org.apache.commons.text.StringEscapeUtils error.

SPARK-51950

Upgraded Parquet to version 1.15.2.

ODP-4446

Upgraded Derby to 10.14.3 to fix CVE-2022-46337.

ODP-4444

Upgraded jetty-server to 9.4.57.v20241219 to fix CVE-2024-13009.

ODP-4422

Added DeltaLake profile and updated Open Table Format versions.

ODP-2118

Upgraded Hudi, DeltaLake, and Iceberg versions for Open Table Client.

ODP-3913

Changed distribution management to point to the staging repository.

ODP-3791

Increased okhttp version to 4.12.0 to fix CVE-2021-0341.

ODP-3792

Increased jackson-databind version to 2.17.2 to fix CVE-2021-0341.

ODP-1486, ODP-1303

Upgraded commons-text to 1.11.0.

ODP-3411, ODP-3361

Bumped Hudi version to internal 0.15.2 (note: some revert commits exist).

ODP-3772

Increased datanucleus-rdbms and datanucleus-core to 6.0.1 to fix sonatype-2020-0972 vulnerabilities.

ODP-3411

Upgraded gcs-aws-java-sdk-bundle to 1.12.782 to fix CVEs: 2024-47535, 2023-34462, 2024-29025.

ODP-3411

Upgraded commons-io to 2.18 to fix CVE-2024-47554.

ODP-2269

Fixed NoClassDefFoundError for InternalFutureFailureAccess class.

ODP-3361

Upgraded Iceberg to 1.7.0 to fix CVE-2024-47561.

ODP-2866

Upgraded Gson version to 2.8.9.

ODP-3361

Upgraded DBCP to 2.9.0 to fix CVE-2020-36186.

ODP-4589

Fixed the Sqoop Import issue with Hive-based timestamp conversions (#19).

ODP-4817

Suppressed the duplicate protobuf resource failures in build.

ODP-4753

Fixed the trino deploy in pom.xml

ODP-4350

ZOOKEEPER-2332

Fixed server startup failure caused by empty transaction log.

ODP-4350

ZOOKEEPER-4715

Verified file size and position in testGetCurrentLogSize.

ODP-4350

ZOOKEEPER-4906

Logged full exception details for server JAAS configuration failure.

ODP-4350

ZOOKEEPER-4839

Fixed SASL DIGEST-MD5 authentication using last successfully logged-in username.

ODP-4350

ZOOKEEPER-4886

Fixed issue preventing observer with small myid from joining SASL quorum.

ODP-4350

ZOOKEEPER-4889

Disabled fallback to DIGEST-MD5 authentication mechanism in FIPS mode.

ODP-4350

ZOOKEEPER-4907

Stopped client packet processing after the server channel is closed.

ODP-4350

ZOOKEEPER-4020

Fixed memory leak from SSL certificate in C client.

ODP-4350

ZOOKEEPER-4699

Fixed hostname use-after-free issue in the C client.

ODP-4350

ZOOKEEPER-4712

Fixed partial shutdown of ZooKeeperServer and its processors.

ODP-4350

ZOOKEEPER-4843

Fixed 'Unreasonable Length' error when configuring jute.maxbuffer to 1GB or more.

ODP-4350

ZOOKEEPER-4394

Ensured only committed requests are applied in sync with the leader before NEWLEADER ACK.

ODP-4350

ZOOKEEPER-2623

Forbade OpCode.check outside OpCode.multi.

ODP-4350

ZOOKEEPER-4409

Fixed NullPointerException in SendAckRequestProcessor.

RANGER-4919

Fixed Maven build failures after Knox Gateway upgrade to version 2.0.0.

2.6.0

RANGER-4915

Strengthened default SSL ciphers for the user sync service.

2.6.0

RANGER-4833

Replaced Bootbox.js with Bootprompt.js for UI dialogs.

2.6.0

RANGER-5002

Fixed Oracle installation failure during vx_principal schema creation.

2.6.0

RANGER-4949

Fixed security zone creation failure in Oracle DB when any role is selected.

2.6.0

RANGER-4977

Fixed HBase scan results returning denied columns.

2.6.0

RANGER-5169

Fixed error during Master Key migration from older format to external key store.

2.6.0

RANGER-5124

Fixed mismatch between policy/tag active time and last update/policy download timestamps.

2.6.0

RANGER-4969

Upgraded Commons IO library to version 2.17.0 to fix related issues.

2.6.0

AMBARI-26519

Added additional public/local check during first-time initialization.

ODP-4349

AMBARI-26240

Fixed alter dispatcher issue.

ODP-4349

AMBARI-26081

Fixed TestConfigs Python test case failures in Ambari.

ODP-4349

AMBARI-26105

Fixed TestPortAlert.py unit test failures due to Python 2→3 migration.

ODP-4349

AMBARI-26255

Fixed issue preventing addition of capacity-scheduler views.

ODP-4349

AMBARI-26234

Fixed ClusterNotFoundException in Confirm Hosts stage during cluster deployment.

ODP-4349

AMBARI-26115

Fixed incorrect resolution of $PYTHONPATH.

ODP-4349

AMBARI-25897

Fixed default SPNEGO configuration example in hive-site.xml.

ODP-4349

AMBARI-25970

Fixed incorrect Ambari Infra Solr service configuration.

ODP-4349

AMBARI-26276

Fixed HDFS web service check failure.

ODP-4349

AMBARI-25968

Fixed Ambari Admin compilation failure.

ODP-4349

AMBARI-26120

Disabled hosts are now excluded when selecting all hosts in the install wizard, step 6.

ODP-4349

AMBARI-25928

Fixed continuous increase of WebSocket connections in the Ambari web UI.

ODP-4349

AMBARI-26198

Fixed time range selector is not hiding automatically.

ODP-4349

AMBARI-26194

Fixed non-functional action button on Ambari host page.

ODP-4349

AMBARI-26205

Fixed dropdown menu flex layout overflow.

ODP-4349

AMBARI-26251

Fixed tooltip display issue.