HBase 1.1.13.500-2201 (EEP 6.3.6) Release Notes

The notes below relate to the MapR Data Platform distribution of Apache HBase.

These release notes contain only HPE-specific information and are not necessarily cumulative in nature. You may also be interested in Ecosystem Component Release Notes and the Apache HBase homepage.

Version 1.1.13.500
Release Date January 2022
Version Interoperability See Interoperability Matrix, Ecosystem Support Matrix, and HBase Support Matrix
Source on GitHub https://github.com/mapr/hbase
GitHub Release Tag 1.1.13.500-mapr-636
Maven Artifacts https://repository.mapr.com/maven/
Package Names Navigate to https://package.ezmeral.hpe.com/releases/MEP/ and select your EEP (MEP) and OS to view the list of package names.

New in this Release

HBase 1.1.13.500 - 2201 introduces the following enhancements or HPE platform-specific behavior changes:
  • CVE fixes
  • Bug fixes

Fixes

This HPE release includes the following fixes on the base Apache release. For details, refer to the commit log for this project in GitHub.

GitHub Commit Number Date (YYYY-MM-DD) HPE Fix Number and Description
3f220a0c74 2022-01-25 EEP-HBASE-275: Upgrade Log4J version to '1.3.1-mapr'
7fdeb174ed 2022-01-13 EEP-HBASE-274: HBase REST authentication doesn't work for /jmx and /conf
a5f4e12215 2021-12-20 EEP-HBASE-270: Update disruptor dependency in EEP-6.3.5
ec24def3de 2021-12-20 EEP-HBASE-263: Log4j Vulnerabilities: CVE-2019-17571 -- Upgrading to 1.3.0-mapr
69fc348174 2021-12-14 EEP-HBASE-263: Log4j Vulnerabilities: CVE-2019-17571
90584ea4d5 2021-11-18 EEP-HBASE-260: Netty Vulnerabilities: WS-2020-0408, CVE-2021-37137 and CVE-2021-37136
42b703d124 2021-10-25 MAPR-HBASE-252: [Hbase] CVE-2021-42340 Apache Tomcat DoS

Known Issues and Limitations

This release contains the following known issues and limitations:
  • ASYNC-5: Data-fabric-SASL security is not implemented in AsyncHBase. As a result, an AsyncHBase client connection fails on a secure data-fabric cluster. Workaround: Implement AsyncHBase security or disable HBase security.
  • Data-fabric client nodes cannot be configured for HBase by using the configure.sh script. Workaround: To configure an HBase client node, you can use the configure_client.sh script. For more information, see Configuring HBase on a Client Node.
  • MD-5925: Drill versions 1.11.0 through 1.16.0.x do not support querying HBase tables. Workaround: None.
  • ASYNC-9: An error is generated when AsyncHBase is used to put data to a cluster with HBase and Kerberos configured. The error occurs when hbase.rpc.protection is set to privacy or integrity in the AsyncHbase client configuration. Workaround: To avoid the error, set hbase.rpc.protection to authentication.