An update for hadoop is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP3 and openEuler-22.03-LTS Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2022-2016 Final 1.0 1.0 2022-10-21 Initial 2022-10-21 2022-10-21 openEuler SA Tool V1.0 2022-10-21 hadoop security update An update for hadoop is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP3 and openEuler-22.03-LTS. Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fix(es): In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.(CVE-2021-33036) An update for hadoop is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP3 and openEuler-22.03-LTS. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High hadoop https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2016 https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33036 https://nvd.nist.gov/vuln/detail/CVE-2021-33036 openEuler-20.03-LTS-SP1 openEuler-20.03-LTS-SP3 openEuler-22.03-LTS hadoop-devel-3.3.4-1.oe1.aarch64.rpm hadoop-common-native-3.3.4-1.oe1.aarch64.rpm hadoop-debuginfo-3.3.4-1.oe1.aarch64.rpm hadoop-yarn-security-3.3.4-1.oe1.aarch64.rpm hadoop-debugsource-3.3.4-1.oe1.aarch64.rpm libhdfs-3.3.4-1.oe1.aarch64.rpm hadoop-common-native-3.3.4-1.oe1.aarch64.rpm hadoop-yarn-security-3.3.4-1.oe1.aarch64.rpm hadoop-debugsource-3.3.4-1.oe1.aarch64.rpm libhdfs-3.3.4-1.oe1.aarch64.rpm hadoop-devel-3.3.4-1.oe1.aarch64.rpm hadoop-debuginfo-3.3.4-1.oe1.aarch64.rpm hadoop-debugsource-3.3.4-1.oe2203.aarch64.rpm libhdfs-3.3.4-1.oe2203.aarch64.rpm hadoop-devel-3.3.4-1.oe2203.aarch64.rpm hadoop-yarn-security-3.3.4-1.oe2203.aarch64.rpm hadoop-debuginfo-3.3.4-1.oe2203.aarch64.rpm hadoop-common-native-3.3.4-1.oe2203.aarch64.rpm hadoop-common-3.3.4-1.oe1.noarch.rpm hadoop-yarn-3.3.4-1.oe1.noarch.rpm hadoop-mapreduce-examples-3.3.4-1.oe1.noarch.rpm hadoop-hdfs-3.3.4-1.oe1.noarch.rpm hadoop-maven-plugin-3.3.4-1.oe1.noarch.rpm hadoop-httpfs-3.3.4-1.oe1.noarch.rpm hadoop-client-3.3.4-1.oe1.noarch.rpm hadoop-tests-3.3.4-1.oe1.noarch.rpm hadoop-mapreduce-3.3.4-1.oe1.noarch.rpm hadoop-client-3.3.4-1.oe1.noarch.rpm hadoop-maven-plugin-3.3.4-1.oe1.noarch.rpm hadoop-tests-3.3.4-1.oe1.noarch.rpm hadoop-httpfs-3.3.4-1.oe1.noarch.rpm hadoop-common-3.3.4-1.oe1.noarch.rpm hadoop-mapreduce-3.3.4-1.oe1.noarch.rpm hadoop-mapreduce-examples-3.3.4-1.oe1.noarch.rpm hadoop-yarn-3.3.4-1.oe1.noarch.rpm hadoop-hdfs-3.3.4-1.oe1.noarch.rpm hadoop-httpfs-3.3.4-1.oe2203.noarch.rpm hadoop-client-3.3.4-1.oe2203.noarch.rpm hadoop-mapreduce-examples-3.3.4-1.oe2203.noarch.rpm hadoop-maven-plugin-3.3.4-1.oe2203.noarch.rpm hadoop-yarn-3.3.4-1.oe2203.noarch.rpm hadoop-hdfs-3.3.4-1.oe2203.noarch.rpm hadoop-mapreduce-3.3.4-1.oe2203.noarch.rpm hadoop-tests-3.3.4-1.oe2203.noarch.rpm hadoop-common-3.3.4-1.oe2203.noarch.rpm hadoop-3.3.4-1.oe1.src.rpm hadoop-3.3.4-1.oe1.src.rpm hadoop-3.3.4-1.oe2203.src.rpm hadoop-debuginfo-3.3.4-1.oe1.x86_64.rpm hadoop-debugsource-3.3.4-1.oe1.x86_64.rpm hadoop-common-native-3.3.4-1.oe1.x86_64.rpm libhdfs-3.3.4-1.oe1.x86_64.rpm hadoop-devel-3.3.4-1.oe1.x86_64.rpm hadoop-yarn-security-3.3.4-1.oe1.x86_64.rpm hadoop-devel-3.3.4-1.oe1.x86_64.rpm hadoop-debugsource-3.3.4-1.oe1.x86_64.rpm hadoop-debuginfo-3.3.4-1.oe1.x86_64.rpm hadoop-common-native-3.3.4-1.oe1.x86_64.rpm hadoop-yarn-security-3.3.4-1.oe1.x86_64.rpm libhdfs-3.3.4-1.oe1.x86_64.rpm hadoop-debuginfo-3.3.4-1.oe2203.x86_64.rpm hadoop-debugsource-3.3.4-1.oe2203.x86_64.rpm hadoop-common-native-3.3.4-1.oe2203.x86_64.rpm hadoop-devel-3.3.4-1.oe2203.x86_64.rpm hadoop-yarn-security-3.3.4-1.oe2203.x86_64.rpm libhdfs-3.3.4-1.oe2203.x86_64.rpm In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. 2022-10-21 CVE-2021-33036 openEuler-20.03-LTS-SP1 openEuler-20.03-LTS-SP3 openEuler-22.03-LTS High 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H hadoop security update 2022-10-21 https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2016