Add initial release notes for El Alto early drop
Add initial release notes for El Alto early drop
Change-Id: Ia2bcff41ae7a49004c0c3efaa819ed2a4ed93ac3
Issue-ID: CCSDK-1589
Signed-off-by: Timoney, Dan (dt5972) <dtimoney@att.com>
diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 93b0b71..c6ef571 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -3,6 +3,66 @@
Release Notes
#############
+Version 0.5.1
+*************
+:Release Date: 2019-08-19
+
+El Alto Early Drop release
+
+**New Features**
+
+There are no new features in the El Alto early drop release. The focus of this release is on bug
+fixes, with a particular emphasis on security fixes.
+
+**Bug Fixes**
+The full list of bug fixes in the El Alto early drop may be found at <https://jira.onap.org/issues/?filter=12018>
+
+The following table summarizes some of the most significant issues addressed:
+
++--------------+----------------------------------------------------+
+| Jira # | Abstract |
++==============+====================================================+
+| [CCSDK-1445] | loading jdbc driver Exception in ccsdk |
++--------------+----------------------------------------------------+
+| [CCSDK-1443] | cds blueprint processor does not start |
++--------------+----------------------------------------------------+
+| [CCSDK-1240] | CVE-20190-3795 : spring-data-core vulnerability |
++--------------+----------------------------------------------------+
+| [CCSDK-1239] | CVE-2019-3797 : spring-data vulnerability |
++--------------+----------------------------------------------------+
+| [CCSDK-1238] | Multiple CVEs - commons-compress |
++--------------+----------------------------------------------------+
+| [CCSDK-1117] | Remove runtime internet dependency for dgbuilder |
++--------------+----------------------------------------------------+
+| [CCSDK-991] | Upgrade to spring-core 2.8.6 or higher |
++--------------+----------------------------------------------------+
+| [CCSDK-988] | Multiple CVEs - spring-expression < 4.3.17.RELEASE |
++--------------+----------------------------------------------------+
+| [CCSDK-441] | Spring 3 vulnerability CVE-2018-1270 |
++--------------+----------------------------------------------------+
+**Known Issues**
+
+The full list of known issues in CCSDK may be found in the ONAP Jira at <https://jira.onap.org/issues/?filter=11341>
+
+**Security Notes**
+
+*Fixed Security Issues*
+
+*Known Security Issues*
+
+ * In default deployment CCSDK (netbox-nginx) exposes HTTP port 30420 outside of cluster. [`OJSI-160 <https://jira.onap.org/browse/OJSI-160>`_]
+ * In default deployment CCSDK (cds-ui) exposes HTTP port 30497 outside of cluster. [`OJSI-196 <https://jira.onap.org/browse/OJSI-196>`_]
+ * In default deployment CCSDK (cds-blueprints-processor-http) exposes HTTP port 30499 outside of cluster. [`OJSI-197 <https://jira.onap.org/browse/OJSI-197>`_]
+
+*Known Vulnerabilities in Used Modules*
+
+Quick Links:
+ - `CCSDK project page <https://wiki.onap.org/display/DW/Common+Controller+SDK+Project>`_
+
+ - `Passing Badge information for CCSDK <https://bestpractices.coreinfrastructure.org/en/projects/1630>`_
+
+ - `Project Vulnerability Review Table for CCSDK <https://wiki.onap.org/pages/viewpage.action?pageId=51282469>`_
+
Version 0.4.4/0.4.5
*******************
:Release Date: 2019-06-13
@@ -12,7 +72,7 @@
**New Features**
-The full list of Dublin epics and user stories for CCSDK maybe be found at <https://jira.onap.org/issues/?filter=11802>.
+The full list of Dublin epics and user stories for CCSDK may be found at <https://jira.onap.org/issues/?filter=11802>.
The following list summarizes some of the most significant epics: