From b04b1ba5668028e4d9e8dc98a2acc386fbbe5477 Mon Sep 17 00:00:00 2001 From: Abhishek Lekshmanan Date: Tue, 17 Nov 2020 20:51:40 +0100 Subject: [PATCH] doc: releases: v15.2.6 Octopus release notes Signed-off-by: Abhishek Lekshmanan Co-authored-by: Ilya Dryomov --- doc/releases/octopus.rst | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/doc/releases/octopus.rst b/doc/releases/octopus.rst index 182acdbcf6fd9..1f252aa691e5b 100644 --- a/doc/releases/octopus.rst +++ b/doc/releases/octopus.rst @@ -1,3 +1,21 @@ +v15.2.6 Octopus +=============== + +This is the 6th backport release in the Octopus series. This release fixes +a security flaw affecting Messenger v1 & v2. We recommend users to update to +this release. + +Notable Changes +--------------- + +* CVE 2020-25660: CEPHX_V2 replay attack protection lost, for Messenger v1 & v2 (Ilya Dryomov) + +Changelog +--------- + +* mon/MonClient: bring back CEPHX_V2 authorizer challenges (Ilya Dryomov) + + v15.2.5 Octopus =============== -- 2.47.3