Document OJSI-122 vulnerability

[optf/osdf.git] / docs / sections / release-notes.rst

diff --git a/docs/sections/release-notes.rst b/docs/sections/release-notes.rst
index 388631e..4c4bd9c 100644 (file)
--- a/docs/sections/release-notes.rst
+++ b/docs/sections/release-notes.rst
@@ -6,8 +6,89 @@
 Release Notes
 =============
 
+Version: 4.0.0
+--------------
+
+:Release Date: 2019-06-06 (Dublin Release)
+
+**New Features**
+
+The Dublin release is the third release for ONAP Optimization Framework (OOF).
+
+A summary of features includes
+
+* Support SON (PCI/ANR) optimization using OSDF
+* Implement encryption for OSDF internal and external communication
+
+* Platform Maturity Level 1
+    * ~65.1+ unit test coverage
+
+The Dublin release for OOF delivered the following Epics.
+
+    * [OPTFRA-426]     Track the changes to CMSO to support change management schedule optimization
+    * [OPTFRA-424]     Extend OOF to support traffic distribution optimization
+    * [OPTFRA-422]     Move OOF projects' CSIT to run on OOM
+    * [OPTFRA-276]     Implementing a POC for 5G SON Optimization
+    * [OPTFRA-270]     This epic captures stories related to maintaining current S3P levels of the project as new functional requirements are supported
+
+
+**Bug Fixes**
+
+* The full list of implemented user stories and epics is available on `DUBLIN RELEASE <https://jira.onap.org/projects/OPTFRA/versions/10463>`_
+
+**Known Issues**
+
+
+
+**Security Notes**
+
+*Fixed Security Issues*
+
+*Known Security Issues*
+
+    * [`OJSI-122 <https://jira.onap.org/browse/OJSI-122>`_] In default deployment OPTFRA (oof-osdf) exposes HTTP port 30248 outside of cluster.
+
+*Known Vulnerabilities in Used Modules*
+
+OPTFRA osdf code has been formally scanned during build time using NexusIQ and no Critical vulnerability was found.
+The OPTF open Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=64005463>`_.
+
+Quick Links:
+    - `OPTFRA project page <https://wiki.onap.org/display/DW/Optimization+Framework+Project>`_
+    - `Passing Badge information for OPTFRA <https://bestpractices.coreinfrastructure.org/en/projects/1720>`_
+    - `Project Vulnerability Review Table for OPTF <https://wiki.onap.org/pages/viewpage.action?pageId=64005463>`_
+
+**Upgrade Notes**
+
+None.
+
+**Deprecation Notes**
+
+None.
+
+**Other**
+
+None
 
-Version: 1.2.4
+Version: 3.0.1
+--------------
+
+:Release Date: 2019-01-31 (Casablanca Maintenance Release)
+
+The following items were deployed with the Casablanca Maintenance Release:
+
+
+**New Features**
+
+None.
+
+**Bug Fixes**
+
+* [OPTFRA-401] -       Need flavor id while launching vm.
+
+
+
+Version: 3.0.0
 --------------
 
 :Release Date: 2018-11-30 (Casablanca Release)
@@ -40,7 +121,7 @@ A summary of features includes
 
 * Platform Maturity Level 1
     * ~65.1+ unit test coverage
-    
+
 The Casablanca release for OOF delivered the following Epics.
 
     * [OPTFRA-273] - Epic Name: OOF Casablanca S3P Manageability enhancement
@@ -82,7 +163,7 @@ None.
 
 None
 
-Version: 1.1.1
+Version: 2.0.0
 --------------
 
 :Release Date: 2018-06-07