summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGildas Lanilis <gildas.lanilis@huawei.com>2018-05-31 10:28:40 -0700
committerManoop Talasila <talasila@research.att.com>2018-06-01 17:02:25 +0000
commit14a279637411d580aff1614469fd725f0c1e95e9 (patch)
tree6db20e7766c936c501d5bc926b4c40ff58ea9635
parent09516395ecf10e239d507ef586da91015e8ad529 (diff)
Document Security section of the Release Notes3.0.2-ONAP2.0.0-ONAP2.0.0-ONAP
Change-Id: I4d0c00271c2a8ce53a50769cecf88d9b8f1aaebb Issue-ID: DOC-270 Signed-off-by: Gildas Lanilis <gildas.lanilis@huawei.com> (cherry picked from commit 8764d78f63c210f7b4efd5fd2ed0d12858d950c6)
-rw-r--r--docs/release-notes.rst16
1 files changed, 12 insertions, 4 deletions
diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 1a4697bc..1dd65bea 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -9,7 +9,7 @@ Portal Platform Release Notes
Version: 2.2.0
--------------
-:Release Date: 7 June 2018
+:Release Date: 2018-06-07
.. toctree::
:maxdepth: 1
@@ -41,8 +41,16 @@ We worked on hardening the ONAP Portal platform by improving code quality and ad
* The Portal/SDK fn_user table has encrypted passwords that need to be changed to use a hash algorithm
* UI cleanup needed: on adding entries to News Widget and display on Application Onboarding page
-**Security Issues**
- * https://wiki.onap.org/pages/viewpage.action?pageId=27689089
+**Security Notes**
+
+PORTAL code has been formally scanned during build time using NexusIQ and all Critical vulnerabilities have been addressed, items that remain open have been assessed for risk and determined to be false positive. The PORTAL open Critical security vulnerabilities and their risk assessment have been documented as part of the `project <https://wiki.onap.org/pages/viewpage.action?pageId=27689089>`_.
+
+Quick Links:
+ - `PORTAL project page <https://wiki.onap.org/display/DW/Portal+Platform+Project>`_
+
+ - `Passing Badge information for PORTAL <https://bestpractices.coreinfrastructure.org/en/projects/1441>`_
+
+ - `Project Vulnerability Review Table for PORTAL <https://wiki.onap.org/pages/viewpage.action?pageId=27689089>`_
**Upgrade Notes**
* Upgrades to Portal platform can be performed using Heat based installation scripts available under demo repository.
@@ -62,7 +70,7 @@ We worked on hardening the ONAP Portal platform by improving code quality and ad
Version: 1.3.0
--------------
-:Release Date: 16 November 2017
+:Release Date: 2017-11-16
The ONAP Portal is a platform that provides the ability to integrate different ONAP applications into a centralized Portal Core. The platform seed code is improved with below listed enhancements in this release. This is technically the first release of ONAP Portal Platform, previous release was the seed code contribution. As such, the defects fixed in this release were raised during the course of the release and while its integration testing. Anything not closed is captured below under Known Issues. If you want to review the defects fixed in the Amsterdam release, refer to Jira (jira.onap.org).