You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Sean Busbey (JIRA)" <ji...@apache.org> on 2018/10/24 17:40:00 UTC

[jira] [Commented] (HADOOP-15878) website should have a list of CVEs w/impacted versions and guidance

    [ https://issues.apache.org/jira/browse/HADOOP-15878?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16662603#comment-16662603 ] 

Sean Busbey commented on HADOOP-15878:
--------------------------------------

- v0
  - adds new page for CVE List  under "community" section of navbar
  - adds entries for everything from the last ~12 months

- v0 rendered
  - same as above, but after running {{hugo}} to render

If there's a PMC member with better records on reported on dates, please let me know. These ones are what I could figure out from mailing lists.

> website should have a list of CVEs w/impacted versions and guidance
> -------------------------------------------------------------------
>
>                 Key: HADOOP-15878
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15878
>             Project: Hadoop Common
>          Issue Type: Task
>          Components: documentation
>            Reporter: Sean Busbey
>            Assignee: Sean Busbey
>            Priority: Minor
>         Attachments: HADOOP-15878.0.patch, HADOOP-15878.0.rendered.patch
>
>
> Our website should have a page with publicly disclosed CVEs listed. They should include the community's understanding of impacted and fixed versions.
> For a simple example, see what kafka does:
> https://kafka.apache.org/cve-list



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org