X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=docs%2Frelease-notes.rst;h=5e56c6e7a9f242b003ebb2a56b17360fe094d4b4;hb=a1511a0712e4e50e3a70dc1fd8d39d2f082df4a3;hp=216b192f7f735d6f8131e2b5555d26f1da83a818;hpb=60329a51a58e578008c4bf4aa5d291ca64050760;p=sdnc%2Foam.git diff --git a/docs/release-notes.rst b/docs/release-notes.rst index 216b192f..5e56c6e7 100644 --- a/docs/release-notes.rst +++ b/docs/release-notes.rst @@ -3,10 +3,11 @@ Release Notes ============= -Version 1.5.3 +Version 1.5.4 ------------- :Release Date: 2019-06-13 + **New Features** The full list of Dublin epics and user stories for SDNC maybe be found at . @@ -36,6 +37,10 @@ The full list of bug fixes in the SDNC Dublin release may be found at +One item of note is that the SDNC admin portal was determined to have a number of security vulnerabilities, +under Known Security Issues. As a temporary remediation, the admin portal is disabled in +Dublin. It will be re-enabled in El Alto once the security issues are addressed. + **Security Notes** *Fixed Security Issues* @@ -59,6 +64,7 @@ The full list of known issues in SDNC may be found in the ONAP Jira at `_ In default deployment SDNC (sdnc) exposes HTTP port 30202 outside of cluster. - `OJSI-100 `_ In default deployment SDNC (sdnc-dgbuilder) exposes HTTP port 30203 outside of cluster. - `OJSI-179 `_ dev-sdnc-sdnc exposes JDWP on port 1830 which allows for arbitrary code execution +- `OJSI-183 `_ SDNC exposes ssh service on port 30208 *Known Vulnerabilities in Used Modules*