摘要:
hadoop security update
安全等级: Critical
公告ID: KylinSec-SA-2022-2825
发布日期: 2022年11月11日
Apache Hadoop是一个框架，它允许使用简单的编程模型跨计算机集群分布式处理大型数据集。它旨在从单个服务器扩展到数千台机器，每台机器都提供本地计算和存储。
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2022-26612 | KY3.4-4A | hadoop | Fixed |
| CVE-2022-26612 | KY3.4-5A | hadoop | Fixed |
| CVE-2022-26612 | KY3.5.1 | hadoop | Fixed |
| CVE-2021-37404 | KY3.4-4A | hadoop | Fixed |
| CVE-2021-37404 | KY3.4-5A | hadoop | Fixed |
| CVE-2021-37404 | KY3.5.1 | hadoop | Fixed |
| CVE-2022-25168 | KY3.4-4A | hadoop | Fixed |
| CVE-2022-25168 | KY3.4-5A | hadoop | Fixed |
| CVE-2022-25168 | KY3.5.1 | hadoop | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| hadoop-common | noarch | 3.3.4-1.kb2.ky3_5 |
| hadoop-tests | noarch | 3.3.4-1.kb2.ky3_5 |
| hadoop-client | noarch | 3.3.4-1.kb2.ky3_5 |
| hadoop-httpfs | noarch | 3.3.4-1.kb2.ky3_5 |
| hadoop-mapreduce | noarch | 3.3.4-1.kb2.ky3_5 |
| hadoop-hdfs | noarch | 3.3.4-1.kb2.ky3_5 |
| hadoop-yarn | noarch | 3.3.4-1.kb2.ky3_5 |
| hadoop-mapreduce-examples | noarch | 3.3.4-1.kb2.ky3_5 |
| hadoop-maven-plugin | noarch | 3.3.4-1.kb2.ky3_5 |
| hadoop-yarn-security | x86_64 | 3.3.4-1.kb2.ky3_5 |
| hadoop-common-native | x86_64 | 3.3.4-1.kb2.ky3_5 |
| libhdfs | x86_64 | 3.3.4-1.kb2.ky3_5 |
| hadoop-devel | x86_64 | 3.3.4-1.kb2.ky3_5 |
| hadoop-devel | aarch64 | 3.3.4-1.kb2.ky3_5 |
| libhdfs | aarch64 | 3.3.4-1.kb2.ky3_5 |
| hadoop-common-native | aarch64 | 3.3.4-1.kb2.ky3_5 |
| hadoop-yarn-security | aarch64 | 3.3.4-1.kb2.ky3_5 |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| hadoop-maven-plugin | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-common | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-tests | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-hdfs | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-yarn | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-mapreduce-examples | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-client | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-httpfs | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-mapreduce | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-common-native | x86_64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-yarn-security | x86_64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-devel | x86_64 | 3.3.4-1.kb2.ky3_4 |
| libhdfs | x86_64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-yarn-security | aarch64 | 3.3.4-1.kb2.ky3_4 |
| libhdfs | aarch64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-devel | aarch64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-common-native | aarch64 | 3.3.4-1.kb2.ky3_4 |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| hadoop-tests | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-httpfs | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-common | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-maven-plugin | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-hdfs | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-mapreduce | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-yarn | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-client | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-mapreduce-examples | noarch | 3.3.4-1.kb2.ky3_4 |
| hadoop-devel | x86_64 | 3.3.4-1.kb2.ky3_4 |
| libhdfs | x86_64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-yarn-security | x86_64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-common-native | x86_64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-common-native | aarch64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-yarn-security | aarch64 | 3.3.4-1.kb2.ky3_4 |
| libhdfs | aarch64 | 3.3.4-1.kb2.ky3_4 |
| hadoop-devel | aarch64 | 3.3.4-1.kb2.ky3_4 |
方法一：下载安装包进行升级安装
1、通过下载链接下载需要升级的升级包保存，如 xxx.rpm
2、通过rpm命令升级，如 rpm -Uvh xxx.rpm
方法二：通过软件源进行升级安装
1、保持能够连接上互联网
2、通过yum命令升级指定的包，如 yum install 包名
