[HDFS-16317] Backport HDFS-14729 for branch-3.2

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.2
• Fix Version/s: 3.2.3
• Component/s: security
• Labels: pull-request-available
• Assignee: Ananya Singh
• Reporter: Ananya Singh
• Created: 12/Nov/21 05:05
• Updated: 22/Dec/21 05:33
• Resolved: 22/Dec/21 05:33

Description

Our security tool raised the following security flaw on Hadoop 3.2.2: 

CVE-2015-9251 :   https://nvd.nist.gov/vuln/detail/ CVE-2015-9251

CVE-2019-11358 : https://nvd.nist.gov/vuln/detail/ CVE-2019-11358

CVE-2020-11022  : https://nvd.nist.gov/vuln/detail/ CVE-2020-11022 

CVE-2020-11023    : https://nvd.nist.gov/vuln/detail/ CVE-2020-11023

 

 

 

 

Issue Links

• relates to: HDFS-14729 Upgrade Bootstrap and jQuery versions used in HDFS UIs
• links to: GitHub Pull Request #3692
• links to: GitHub Pull Request #3780