You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-dev@hadoop.apache.org by "Ananya Singh (Jira)" <ji...@apache.org> on 2021/11/12 05:06:00 UTC

[jira] [Created] (HDFS-16317) Backport HDFS-14729 for branch-3.2

Ananya Singh created HDFS-16317:
-----------------------------------

             Summary: Backport HDFS-14729 for branch-3.2
                 Key: HDFS-16317
                 URL: https://issues.apache.org/jira/browse/HDFS-16317
             Project: Hadoop HDFS
          Issue Type: Bug
          Components: security
    Affects Versions: 3.2.2
            Reporter: Ananya Singh


Our security tool raised the following security flaw on Hadoop 3.2.2: 

+[CVE-2015-9251 :  |http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251] [https://nvd.nist.gov/vuln/detail/|https://nvd.nist.gov/vuln/detail/CVE-2021-29425] [CVE-2015-9251|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251]+

+[CVE-2019-11358|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11358] : [https://nvd.nist.gov/vuln/detail/|https://nvd.nist.gov/vuln/detail/CVE-2021-29425] [CVE-2019-11358|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11358]+

+[CVE-2020-11022 |http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11022] : [https://nvd.nist.gov/vuln/detail/|https://nvd.nist.gov/vuln/detail/CVE-2021-29425] [CVE-2020-11022|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11022]+ 

+[CVE-2020-11023 |http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11023] [ |http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11022] : [https://nvd.nist.gov/vuln/detail/|https://nvd.nist.gov/vuln/detail/CVE-2021-29425] [CVE-2020-11023|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11023]+

 

 

 

 



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-dev-help@hadoop.apache.org