Hadoop 3.4.1.500 (DEP 10.2.0) Release Notes

The notes below relate specifically to the HPE Data Fabric distribution of Apache Hadoop. You may also be interested in the Apache Hadoop changelog and the Apache Hadoop home page.

These release notes contain only HPE-specific information and are not necessarily cumulative in nature. For information about how to use the release notes, see Ecosystem Component Release Notes.

Version 3.4.1.500
Release Date October 2026
Version Interoperability See Ecosystem Pack Components and OS Support.
GitHub Source https://github.com/mapr/hadoop-common/
GitHub Release Tag 3.4.1.500-dep-1020
Maven Artifacts https://repository.mapr.com/maven/
Package Names Navigate to https://package.ezmeral.hpe.com/releases/MEP/ and select your DEP and OS to view the list of package names.

New in this Release

Hadoop 3.4.1.500 introduces the following enhancements or HPE platform-specific behavior changes:
  • CVE updates
  • Bug fixes

Fixes

This HPE release includes the following fixes on the base Apache release:
GitHub Commit Number Date (YYYY-MM-DD) HPE Fix Number and Description
15e84d9b31d 2026-10-07 MAPRHADOOP-639: Update Jetty to 9.4.64.v20261006-df due CVE-2026-12611
ede89b992c3 2026-09-30 MAPRYARN-492: Upgrade Netty to 4.1.138.Final to fix CVE-2026-93563
1234ba2cef9 2026-09-07 MAPRHADOOP-633: Load ProxyCA truststore from SSL client configuration
272ab53071f 2026-08-21 MAPRHADOOP-625: Update Log42 to 2.25.5 due CVE-2026-49844
724ee154a69 2026-08-19 MAPRHADOOP-625: Update Jetty to 9.4.63.v20260812-df due CVEs
f9701cf97b1 2026-08-19 Backport HADOOP-19956. Upgrade lz4-java to 1.11.2 due to security issues
5be38614561 2026-08-19 HADOOP-19957. Upgrade Netty to 4.1.137 due to CVEs
a2e5ed4e7bf 2026-08-19 Backport HADOOP-19949. Upgrade lz4-java to 1.11.1 due to CVE-2026-59949
b0bc9c2215f 2026-08-19 Backport HADOOP-19943. Upgrade Apache Mina to 2.0.29 due to CVE-2026-47065
c09866404b6 2026-08-13 Backport HADOOP-19945. Update to commons-configuration2 2.15.0, commons-lang3 3.20.0 and commons-io 2.22.0 to fix CVE-2026-45205
eef25f73627 2026-07-28 MAPRHADOOP-529: Support OIDC provider logout with ID token hints
20232182808 2026-07-20 MAPRHADOOP-613: Update Jetty to 9.4.60.v20260717-df due CVE-2025-11143 and CVE-2026-2332
31932839cc2 2026-07-14 MAPRHADOOP-618: Update commons-io to 2.22.0 to compatibilities with commons-configuration2
29d101ace1d 2026-07-14 MAPRHADOOP-618: Update org.apache.commons:commons-configuration2 to 2.15.1 due CVE-2026-45205
35b6e12232e 2026-07-07 MAPRHADOOP-615: Update aws-java-sdk to 1.12.797 and aws-java-sdk-v2 to 2.46.21

Known Issues and Limitations

Hadoop 3.4.1.450 has the following known issue and limitation:

  • Multiple labels are not supported within the same node or queue.
  • YARN UI2. If you need to go to the login page after logging out, you must go to the main page and refresh it.

Resolved Issues

None.