question Re: CDP minor upgrade to close vulnerability in Support Questions

CDP minor upgrade to close vulnerability

HanzalaShaikh — Tue, 21 Apr 2026 07:08:49 GMT

Hi Experts,

We are on 7.1.6 CDP version and exposed to CVE-2022-25168.

Versions affected: 2.0.0 to 2.10.1, 3.0.0-alpha to 3.2.3, 3.3.0 to 3.3.2

To address this vulnerability, we are planning to upgrade to CDP 7.1.7 as I got this information from one of the posts in the cloudera community.

My question is does anyone did this upgrade before from 7.1.6 to 7.1.7 to eliminate this CVE. If yes, then how easy is it do we need to make changes in the code level also or we can do the upgrade from the GUI by just downloading, distributing and activating the new version.

Please help with your suggestion and if possible, please share the documentation for this upgrade.

Thanks

Re: CDP minor upgrade to close vulnerability

HanzalaShaikh — Sat, 30 Sep 2023 16:10:00 GMT

Since we are using CDW Cloudera data warehouse, upon doing some research I can say there no change required on code level as we are using hive on Tez and it is going to be a not a major upgrade as we do from CDH to CDP.

Hence accepting this as a solution to my query after thorough research.

Re: CDP minor upgrade to close vulnerability

cjervis — Mon, 02 Oct 2023 13:02:19 GMT

Thank you for posting your findings @HanzalaShaikh