Skip to main content
Emanuel_MXN
Emanuel_MXN
Gold ⭐️
March 1, 2023
Question

Python updates

Hi

 

Regarding python updates, how can they affect cloudera?
there is a security update

 

RHSA-2023:0833 - Security Advisory
Description
A vulnerability was discovered in Python. A quadratic algorithm exists when processing inputs to the IDNA (RFC 3490) decoder, such that a crafted unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor, which could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied hostname.

 

Do these types of updates affect cloudera?

2 replies

upadhyayk04
Gold ⭐️⭐️⭐️
upadhyayk04
Gold ⭐️⭐️⭐️
March 31, 2024

Hello @Emanuel_MXN 

Thank you for brining this

What version of CDP CM are you using? What is the exact python version you are upgrading?

In general we need to ensure that target python version should be compatible with CM CDP and then we should be good

Translate
VidyaSargur
Community Manager
VidyaSargur
Community Manager
April 12, 2024

@upadhyayk04 Did the response assist in resolving your query? If it did, kindly mark the relevant reply as the solution, as it will aid others in locating the answer more easily in the future. However, if you still have concerns, could you please provide the information that @upadhyayk04  has requested?

Translate
Regards, Vidya Sargur, Community Manager Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
    Terms & ConditionsAccessibility statement