You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-dev@hadoop.apache.org by "Wei-Chiu Chuang (Jira)" <ji...@apache.org> on 2021/12/22 05:34:00 UTC
[jira] [Resolved] (HDFS-16317) Backport HDFS-14729 for branch-3.2
[ https://issues.apache.org/jira/browse/HDFS-16317?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Wei-Chiu Chuang resolved HDFS-16317.
------------------------------------
Fix Version/s: 3.2.3
Resolution: Fixed
Merged the commit into branch-3.2 and branch-3.2.3.
> Backport HDFS-14729 for branch-3.2
> ----------------------------------
>
> Key: HDFS-16317
> URL: https://issues.apache.org/jira/browse/HDFS-16317
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Affects Versions: 3.2.2
> Reporter: Ananya Singh
> Assignee: Ananya Singh
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.2.3
>
> Time Spent: 2.5h
> Remaining Estimate: 0h
>
> Our security tool raised the following security flaw on Hadoop 3.2.2:
> +[CVE-2015-9251 : |http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251] [https://nvd.nist.gov/vuln/detail/|https://nvd.nist.gov/vuln/detail/CVE-2021-29425] [CVE-2015-9251|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9251]+
> +[CVE-2019-11358|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11358] : [https://nvd.nist.gov/vuln/detail/|https://nvd.nist.gov/vuln/detail/CVE-2021-29425] [CVE-2019-11358|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11358]+
> +[CVE-2020-11022 |http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11022] : [https://nvd.nist.gov/vuln/detail/|https://nvd.nist.gov/vuln/detail/CVE-2021-29425] [CVE-2020-11022|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11022]+
> +[CVE-2020-11023 |http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11023] [ |http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11022] : [https://nvd.nist.gov/vuln/detail/|https://nvd.nist.gov/vuln/detail/CVE-2021-29425] [CVE-2020-11023|http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-11023]+
>
>
>
>
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-dev-help@hadoop.apache.org