5.3.8 Release Notes

Fixes

• Fix memory leak with OpenSSL (with newer versions of netty libraries) #13738

• Fix Jet vulnerabilities

  • Fix CVE-2022-3171 vulnerabilities in protobuf-java 3.19.4 and hadoop-shaded-protobuf_3_7-1.1.1 #22541
  • Fix CVE-2023-2976 vulnerability in hadoop-shaded-guava-1.1.1.jar (shaded: com.google.guava:guava:30.1.1-jre) #24981
  • Fix CVE-2024-36114 vulnerability in aircompressor-0.21 #26354

• Fix serialization issue with rolling upgrade from 5.2 to 5.3

• Fix phone home metrics for vCPUs