xCAT/xcat-core
2
0
Fork 0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-06-18 20:30:56 +00:00
Code Issues Releases Wiki Activity

Merge pull request #7357 from besawn/security_notice

Browse Source 
Added security advisory documentation for xCAT CVE-2023-27486
This commit is contained in:
besawn
2023-03-08 14:04:32 -05:00
committed by GitHub
parent eb23d63076 85f551e9db
commit 22aa2c700a
3 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
docs/source/security/2023/20230308_xcat.rst Normal file
View File

@ -0,0 +1,18 @@
2023-03-08 - xCAT Vulnerabilities
=================================
*Mar 8, 2023*, xCAT announced the following security advisory: https://github.com/xcat2/xcat-core/security/advisories/GHSA-hpxg-7428-6jvv
Advisory CVEs
-------------
* CVE-2023-27486 - **Insufficient authorization validation between zones when xCAT zones are enabled** (Severity: High)
Please see the security bulletin above for patch, upgrade, or suggested work around information.
Action
------
The issue described in CVE-2023-27486 only impacts users making use of the optional xCAT zones feature. xCAT zones are not enabled by default. Users making use of xCAT zones should upgrade to xCAT 2.16.5 or newer. Users that do not use xCAT zones are not impacted and do not need to upgrade.

7
docs/source/security/2023/index.rst Normal file
View File

@ -0,0 +1,7 @@
2023 Notices
============
.. toctree::
:maxdepth: 1
20230308_xcat.rst

1
docs/source/security/index.rst
View File

@ -4,6 +4,7 @@ Security Notices
.. toctree::
:maxdepth: 2
2023/index.rst
2018/index.rst
2017/index.rst
2016/index.rst