Ranger 2.4.0.300 - 2610 (DEP 10.2.0) Release Notes

The notes below relate specifically to the Data Fabric distribution of Apache Ranger. You may also be interested in the Apache Ranger home page and the Apache Ranger changelog.

These release notes contain only HPE-specific information and are not necessarily cumulative in nature. For information about how to use the release notes, see Ecosystem Component Release Notes.

Version 2.4.0.200
Release Date October 2026
HPE Version Interoperability See Ecosystem Pack Components and OS Support.
Source on GitHub https://github.com/mapr/ranger
GitHub Release Tag 2.4.0.300-dep-1020
Maven Artifacts https://repository.mapr.com/maven/
Package Names Navigate to https://package.mapr.hpe.com/releases/MEP/, and select your EEP (MEP) and OS to view the list of package names.

New in this Release

  • Bug fixes.

  • Rebranding.

Fixes

This HPE release includes the following fixes on the base Apache release. For details, refer to the commit log for this project in GitHub:
Commit Date (YYYY-MM-DD) HPE Fix Number and Description
a0568f32f 2026-10-09 RAN-329 Exclude unsupported plugins from build (Part 2)
358a8231b 2026-10-09 RAN-362 Update Jetty to 9.4.64.v20261006-df
81fc7af3f 2026-08-18 RAN-347 ClassNotFoundException: com.auth0.jwk.SigningKeyNotFoundException (Part 2 - usersync)
4688e0ee3 2026-08-18 RAN-349 CVEs in Ranger (Part 2.1 - jackson-annotations in usersync)
3f61fb1f6 2026-08-11 RAN-349 CVEs in Ranger (Part 2)
455ea43b0 2026-08-13 RAN-349 CVEs in Ranger (Part 1 - commons-lang)
fb966dec6 2026-08-11 RAN-329 Exclude unsupported plugins from build
1364fa65c 2026-07-23 RAN-347 ClassNotFoundException: com.auth0.jwk.SigningKeyNotFoundException
c80799c32 2026-07-22 RAN-346 Upgrade Jetty to 9.4.60.v20260717-df to fix CVE-2026-2332
4e20078be 2026-07-22 RAN-345 Upgrade commons-beanutils to 1.11.0 to fix CVE-2025-48734
530605db2 2026-07-22 RAN-344 Upgrade log4j and slf4j to the latest versions to fix CVEs

Known Issues and Limitations

Ranger and Mixed FIPS Configurations
The Ranger component in EEP 9.2.0 cannot be used in a mixed FIPS configuration (a cluster consisting of FIPS and non-FIPS nodes).
RAN-279
If you are upgrading to EEP 9.2.0 or later, you must upgrade both Ranger and Hive packages together if the Hive plugin is used. If you upgraded only Ranger, you might encounter the following error:
Error: Error running query: java.lang.NoSuchMethodError: 
'java.lang.String org.apache.hadoop.hive.ql.security.authorization.plugin.HivePrivilegeObject.getOwnerName()' (state=,code=0)
Upgrading Hive should fix the problem.

Resolved Issues

None.