From: Abhishek Lekshmanan <abhishek@suse.com>
Date: Tue, 17 Nov 2020 19:51:40 +0000 (+0100)
Subject: doc: releases: v15.2.6 Octopus release notes
X-Git-Tag: v16.1.0~493^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fpull%2F38142%2Fhead;p=ceph.git

doc: releases: v15.2.6 Octopus release notes

Signed-off-by: Abhishek Lekshmanan <abhishek@suse.com>
Co-authored-by: Ilya Dryomov <idryomov@gmail.com>
---

diff --git a/doc/releases/octopus.rst b/doc/releases/octopus.rst
index 182acdbcf6f..1f252aa691e 100644
--- a/doc/releases/octopus.rst
+++ b/doc/releases/octopus.rst
@@ -1,3 +1,21 @@
+v15.2.6 Octopus
+===============
+
+This is the 6th backport release in the Octopus series. This release fixes
+a security flaw affecting Messenger v1 & v2. We recommend users to update to
+this release.
+
+Notable Changes
+---------------
+
+* CVE 2020-25660: CEPHX_V2 replay attack protection lost, for Messenger v1 & v2 (Ilya Dryomov)
+
+Changelog
+---------
+
+* mon/MonClient: bring back CEPHX_V2 authorizer challenges (Ilya Dryomov)
+
+
 v15.2.5 Octopus
 ===============