CDP minor upgrade to close vulnerability

Question

Hi Experts,

We are on 7.1.6 CDP version and exposed to CVE-2022-25168.

Versions affected: 2.0.0 to 2.10.1, 3.0.0-alpha to 3.2.3, 3.3.0 to 3.3.2

To address this vulnerability, we are planning to upgrade to CDP 7.1.7 as I got this information from one of the posts in the cloudera community.

My question is does anyone did this upgrade before from 7.1.6 to 7.1.7 to eliminate this CVE. If yes, then how easy is it do we need to make changes in the code level also or we can do the upgrade from the GUI by just downloading, distributing and activating the new version.

Please help with your suggestion and if possible, please share the documentation for this upgrade.

Thanks

HanzalaShaikh · Accepted Answer

Since we are using CDW Cloudera data warehouse, upon doing some research I can say there no change required on code level as we are using hive on Tez and it is going to be a not a major upgrade as we do from CDH to CDP.

Hence accepting this as a solution to my query after thorough research.

cjervis · Answer

Thank you for posting your findings @HanzalaShaikh

Sign up

Please use your Cloudera account.

Login to the community

Please use your Cloudera account.