2
0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-05-29 09:13:08 +00:00

Add security notification for 2018-06-12 OpenSSL reported issue

This commit is contained in:
Victor Hu 2018-06-18 09:52:06 -04:00
parent 61cbe03b93
commit cce391e208
3 changed files with 29 additions and 0 deletions

View File

@ -0,0 +1,21 @@
2018-06-12 - OpenSSL Vulnerabilities
====================================
*Jun 12, 2018*, OpenSSL announced the following security advisories: https://www.openssl.org/news/secadv/20180612.txt
Advisory CVEs
-------------
* CVE-2018-0732 - **Client DoS due to large DH parameter** (Severity: Low)
Please see the security bulletin above for patch, upgrade, or suggested work around information.
Action
------
xCAT uses OpenSSL for client-server communication but **does not** ship it.
It is highly recommended to keep your OpenSSL levels up-to-date with the indicated versions in the security bulletins to prevent any potential security threats. Obtain the updated software packages from your Operating system distribution channels.

View File

@ -0,0 +1,7 @@
2018 Notices
============
.. toctree::
:maxdepth: 1
20180612_openssl.rst

View File

@ -4,6 +4,7 @@ Security Notices
.. toctree::
:maxdepth: 2
2018/index.rst
2017/index.rst
2016/index.rst
2015/index.rst