Release Notes
=============
-Version 1.5.3
+Version 1.5.4
-------------
:Release Date: 2019-06-13
+
**New Features**
The full list of Dublin epics and user stories for SDNC maybe be found at <https://jira.onap.org/issues/?filter=11803>.
**Known Issues**
The full list of known issues in SDNC may be found in the ONAP Jira at <https://jira.onap.org/issues/?filter=11119>
+One item of note is that the SDNC admin portal was determined to have a number of security vulnerabilities,
+under Known Security Issues. As a temporary remediation, the admin portal is disabled in
+Dublin. It will be re-enabled in El Alto once the security issues are addressed.
+
**Security Notes**
*Fixed Security Issues*
- `OJSI-34 <https://jira.onap.org/browse/OJSI-34>`_ Multiple SQL Injection issues in SDNC
- `OJSI-99 <https://jira.onap.org/browse/OJSI-99>`_ In default deployment SDNC (sdnc) exposes HTTP port 30202 outside of cluster.
- `OJSI-100 <https://jira.onap.org/browse/OJSI-100>`_ In default deployment SDNC (sdnc-dgbuilder) exposes HTTP port 30203 outside of cluster.
+- `OJSI-179 <https://jira.onap.org/browse/OJSI-179>`_ dev-sdnc-sdnc exposes JDWP on port 1830 which allows for arbitrary code execution
+- `OJSI-183 <https://jira.onap.org/browse/OJSI-183>`_ SDNC exposes ssh service on port 30208
*Known Vulnerabilities in Used Modules*