HBase 1.4.14.920 - 2610 (DEP 10.2.0) Release Notes
The notes below relate to the HPE Data Fabric distribution of HBase.
These release notes contain only HPE-specific information and are not necessarily cumulative in nature. You may also be interested in the Ecosystem Component Release Notes and the Apache HBase homepage.
| Version | 1.4.14.920 |
| Release Date | October 2026 |
| Version Interoperability | See Interoperability Matrix, Ecosystem Support Matrix, and HBase Support Matrix. |
| Source on GitHub | https://github.com/mapr/hbase |
| GitHub Release Tag | 1.4.14.920-dep-1020 |
| Maven Artifacts | https://repository.mapr.com/maven/ |
| Package Names | Navigate to https://package.ezmeral.hpe.com/releases/MEP/ and select your DEP (EEP or MEP) and OS to view the list of package names. |
New in this Release
- CVEs fixes
- Bug fixes
Fixes
This HPE release includes the following fixes on the base Apache release. For details, refer to the commit log for this project in GitHub:
| GitHub Commit Number | Date (YYYY-MM-DD) | HPE Fix Number and Description |
| 2992a0f5157 | 2026-10-07 | DEP-HBASE-475: Upgrade Jetty to 9.4.64.v20261006-df |
| 5047ac1399c | 2026-09-10 | DEP-HBASE-472: Upgrade Jetty to 9.4.63.v20260812-df |
| 6080415a909 | 2026-08-25 | DEP-HBASE-469: Multiple concurrent entries to CatalotJanitor scan() |
| e85866a6884 | 2026-08-19 | DEP-HBASE-466: NPE at HTable.get(HTable.java:1112) when all mfs nodes offline |
| b3cb588b710 | 2026-08-17 | DEP-HBASE-467: Upgrade commons-lang3 to the version 3.20.0 to sync with Hadoop and Hive |
| a86bbb0ba59 | 2026-08-11 | DEP-HBASE-465: JRuby 9.3.x line causing Htrace to fail |
| c40800a77df | 2026-08-10 | DEP-HBASE-464: Upgrade Jackson in HBase to fix CVEs |
| 7600d976f2a | 2026-08-03 | DEP-HBASE-448: Avro vulnerability - CVE-2025-33042 |
| 00218c92619 | 2026-08-03 | DEP-HBASE-451: Netty vulnerabilities - CVE-2026-33871 |
| 172394cacc1 | 2026-08-03 | DEP-HBASE-452: Tomcat vulnerabilities - CVE-2025-55754 |
| 59315b77015 | 2026-07-29 | DEP-HBASE-422: After migrating Scala from 2.12 to 2.13, Spark module has multiple build issues |
| f35db28c9c8 | 2026-07-29 | DEP-HBASE-422: After migrating Scala from 2.12 to 2.13, Spark module has multiple build issues |
| fde53801b7e | 2026-07-27 | DEP-HBASE-457: Fix CVE-2025-48734, CVE-2026-45205 - Part-2 (jetty-client sync) |
| 93bac5c73e8 | 2026-07-27 | DEP-HBASE-458: Sync commons-io and commons-lang3 with Hadoop side after commons-configuration2 upgrade |
| 90977b678f3 | 2026-07-27 | DEP-HBASE-457: Fix CVE-2025-48734, CVE-2026-45205 |
| 87e339d95bb | 2026-07-27 | DEP-HBASE-461: Fix Docker Registry for HBase builds |
| e82bda41759 | 2026-04-27 | DEP-HBASE-445: Move build logic inside the component |
For complete details, refer to the commit log for this project in GitHub.
Known Issues and Limitations
- Redirect to Non-Existent “/login” Page After Authentication:
As part of the SSO implementation in Hadoop, HBase service UIs now redirect users to a “/login” endpoint after authenticating with a username and password. However, the HBase service UIs currently do not have a “/login” page implemented, resulting in an “HTTP ERROR 404 Not Found”.
Workaround:
If redirected to a URL ending in “/login”, manually remove “/login” from the address bar to access the service UI.
Example:
After logging in at https://<hostname>:9095, the browser redirects to https://<hostname>:9095/login, which will return a 404 error. To continue, remove “/login” from the URL
Resolved Issues
None.