diff --git a/docs/source/security/2018/20180612_openssl.rst b/docs/source/security/2018/20180612_openssl.rst new file mode 100644 index 000000000..e11dc06b0 --- /dev/null +++ b/docs/source/security/2018/20180612_openssl.rst @@ -0,0 +1,21 @@ +2018-06-12 - OpenSSL Vulnerabilities +==================================== + +*Jun 12, 2018*, OpenSSL announced the following security advisories: https://www.openssl.org/news/secadv/20180612.txt + + +Advisory CVEs +------------- + +* CVE-2018-0732 - **Client DoS due to large DH parameter** (Severity: Low) + +Please see the security bulletin above for patch, upgrade, or suggested work around information. + +Action +------ + +xCAT uses OpenSSL for client-server communication but **does not** ship it. + +It is highly recommended to keep your OpenSSL levels up-to-date with the indicated versions in the security bulletins to prevent any potential security threats. Obtain the updated software packages from your Operating system distribution channels. + + diff --git a/docs/source/security/2018/index.rst b/docs/source/security/2018/index.rst new file mode 100644 index 000000000..eb736ccb8 --- /dev/null +++ b/docs/source/security/2018/index.rst @@ -0,0 +1,7 @@ +2018 Notices +============ + +.. toctree:: + :maxdepth: 1 + + 20180612_openssl.rst diff --git a/docs/source/security/index.rst b/docs/source/security/index.rst index 911c9ec62..c97f5e61c 100644 --- a/docs/source/security/index.rst +++ b/docs/source/security/index.rst @@ -4,6 +4,7 @@ Security Notices .. toctree:: :maxdepth: 2 + 2018/index.rst 2017/index.rst 2016/index.rst 2015/index.rst