From badde58de3d73a175de9c37338633dae8187edd5 Mon Sep 17 00:00:00 2001 From: Taka Cho Date: Wed, 25 Sep 2019 09:41:28 -0400 Subject: APPC R5 release note added APPC R5 release note Issue-ID: APPC-1722 Change-Id: Ic1b19e49fef77e3ed3b995f774cb0f69813fcbe9 Signed-off-by: Taka Cho --- docs/release-notes.rst | 40 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) diff --git a/docs/release-notes.rst b/docs/release-notes.rst index 44bf540b8..17153ba83 100644 --- a/docs/release-notes.rst +++ b/docs/release-notes.rst @@ -26,6 +26,46 @@ Release Notes .. * This note must be removed after content has been added. +Version: 1.6.4 +-------------- + +:Release Date: 2019-9-30 + +The El Alto added the following feature, bug fixes and security enhancements: + +**New Features** + + - Upgraded OpenDaylight (ODL) version to Fluorine SR2 + +**Bug Fixes** + + - `APPC-1319 `_ - apidoc shows ""undefined"" when netconf successfully mounted + - `APPC-1584 `_ - Incorrect Package name in Audit Directed Graph + - `APPC-1587 `_ - Publish config field mismatch in onap documentaion & Audit DG + - `APPC-1588 `_ - Publish config filed missing in Sync LCM in documentation + - `APPC-1589 `_ - Cvaas directory is not mounted in docker image,Dublin Release + - `APPC-1590 `_ - Sync & Audit Payload to include the file name + - `APPC-1604 `_ - APPC Not Picking up Mesasges from Dmaap + - `APPC-1613 `_ - Exception for LCM request with parameter read from A&AI + - `APPC-1627 `_ - Daexim directory owned by root - access denied during boot + - `APPC-1634 `_ - Mark the fields transient of RequestFailedException.java Serializable class to full-fill Serializable class contract, + - `APPC-1635 `_ - Mark the fields transient of EventMessage.java Serializable class to full-fill Serializable class contract + - `APPC-1639 `_ - Error during CDT SQL query + - `APPC-1713 `_ - Appc eelf logging resource bundle error after ODL upgrade + - `APPC-1736 `_ - change mountpoint for pax property file + +**Security Notes** + +*Fixed Security Issues* + + - `OJSI-25 `_ - SQL Injection in APPC (CVE-2019-12316) + - `OJSI-104 `_ - appc exposes plain text HTTP endpoint using port 30211 + - `OJSI-113 `_ - appc exposes plain text HTTP endpoint using port 30230 + - `OJSI-113 `_ - appc-cdt exposes plain text HTTP endpoint using port 30289 + - `OJSI-176 `_ - dev-appc-appc exposes JDWP on port 1830 which allows for arbitrary code execution + - `OJSI-177 `_ - dev-appc-appc exposes JDWP on port 8101 which allows for arbitrary code execution + - `OJSI-185 `_ - appc exposes ssh service on port 30231 + Version: 1.5.3 -------------- -- cgit 1.2.3-korg