From 8197fc5d05fa7ce2b7031db1f18353a92815b10e Mon Sep 17 00:00:00 2001 From: Gildas Lanilis Date: Tue, 29 May 2018 18:06:43 -0700 Subject: [PATCH] Document Security section of the Release Notes Update with latest informations Change-Id: Ibb4be24f23e4a2dbbf8946a06ff4dd98569f4ba2 Issue-ID: DOC-271 Signed-off-by: Gildas Lanilis --- docs/release-notes.rst | 55 +++++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 54 insertions(+), 1 deletion(-) diff --git a/docs/release-notes.rst b/docs/release-notes.rst index fb9b8128..5e694133 100644 --- a/docs/release-notes.rst +++ b/docs/release-notes.rst @@ -7,7 +7,7 @@ Version: 0.2.2 -------------- -:Release Date: 2018-05-24 +:Release Date: 2018-06-07 @@ -199,6 +199,59 @@ Version: 0.2.2 | [CCSDK-136] | pgaas is dependent on location\_prefix being all lowercase | +-------------+-----------------------------------------------------------------------------------------------------+ +**Security Notes** + +CCSDK code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The CCSDK open Critical security vulnerabilities and their risk assessment have been documented as part of the `project `_. + +Quick Links: + - `CCSDK project page `_ + + - `Passing Badge information for CCSDK `_ + + - `Project Vulnerability Review Table for CCSDK `_ + +**Upgrade Notes** + +N/A + +**Deprecation Notes** + +N/A + +**Other** + +N/A + + +Version: 0.1.0 +-------------- + + +:Release Date: 2017-11-16 + + + +**New Features** + +The Common Controller SDK provides the following functionality : + - Service Logic Interpreter + - Database access library (dblib) + - Service Logic test api (sliapi) + - MD-SAL data query adaptor + - SQL query adaptor + - Resource allocator + - SDC interface + - DMAAP interface + - REST API adaptor + + +**Bug Fixes** + +**Known Issues** + - `CCSDK-110 `_ Resolve license issues in dashboard project + - `CCSDK-136 `_ pgaas is dependent on location_prefix being all lowercase + - `CCSDK-137 `_ isolate deprecated methods + **Security Issues** You may want to include a reference to CVE (Common Vulnerabilities and Exposures) `CVE `_ -- 2.16.6