CLSA-2026-1794477627: TuxCare security update for org.apache.hadoop (3 CVEs)
TuxCare rebuilt 3 org.apache.hadoop packages to address 3 CVEs. Fixed in 2.6.0-tuxcare.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.apache.hadoop:hadoop-clientto a version that resolves this vulnerability.Fixed in 2.6.0-tuxcare.1 - Upgrade
Upgrade
tuxcare/org.apache.hadoop:hadoop-yarn-server-commonto a version that resolves this vulnerability.Fixed in 2.6.0-tuxcare.1 - Upgrade
Upgrade
tuxcare/org.apache.hadoop:hadoop-yarn-server-nodemanagerto a version that resolves this vulnerability.Fixed in 2.6.0-tuxcare.1 - Upgrade
Upgrade
org.apache.hadoopto a version that resolves this vulnerability.Fixed in 2.6.0-tuxcare.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which packages need to be updated?
Update tuxcare/org.apache.hadoop:hadoop-client, tuxcare/org.apache.hadoop:hadoop-yarn-server-common, and tuxcare/org.apache.hadoop:hadoop-yarn-server-nodemanager. The security update is fixed in version 2.6.0-tuxcare.1.
How many CVEs does this update address?
This update addresses three CVEs across the rebuilt org.apache.hadoop packages.