Commit graph

107 commits

Author SHA1 Message Date
Flavio Ceolin cec23830e4 doc: vuln: Add CVE under embargo
Add an entry to CVE-2024-4785

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-16 18:53:02 -04:00
Flavio Ceolin 2e053e8116 doc: security: CVE-2024-3077 left embargo
Disclose information about CVE-2024-3077.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-04-04 12:22:57 -04:00
Flavio Ceolin 9c27b21ecb doc: security: Add information about Open Security Training
Add information and links for open source security training.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-03-26 16:16:08 -04:00
Flavio Ceolin 6704557bf9 doc: security: cve-2023-7060 left embargo
Disclose information about cve-2023-7060.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-03-21 17:51:31 -04:00
Flavio Ceolin 18c96b64c7 doc: security: cve-2023-6881 left embargo
Disclose information about cve-2023-6881.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-21 16:12:26 +01:00
Flavio Ceolin 3fb795a27f doc: security: cve-2024-1638 left embargo
Disclose information about cve-2024-1638.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-20 15:07:07 -06:00
Flavio Ceolin a6e9f12ca8 doc: security: cve-2023-5779 left embargo
Disclose information about cve-2023-5779.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-18 18:05:51 +01:00
Flavio Ceolin 194bc9b176 doc: security: cve-2023-6249 left embargo
Disclose information about cve-2023-6249.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-18 18:05:51 +01:00
Flavio Ceolin a8690fd862 doc: security: cve-2023-6749 left embargo
Disclose information about cve-2023-6749.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-18 18:05:51 +01:00
Flavio Ceolin 7d3eee7b27 doc: vuln: Add CVEs under embargo
Add placeholders for CVEs under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-01-05 23:57:30 +01:00
Flavio Ceolin 052590b0c1 doc: vuln: Disclose information about CVE-2023-4424
Information about CVE-2023-4424

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-12-09 15:31:42 -05:00
Mia Koen 0bcad09392 bluetooth: mesh: Doc fix Bluetooth mesh to Mesh
SIG has changed Bluetooth mesh to Bluetooth Mesh
Updating zephyr docs accordingly
Leaving out old release notes

Signed-off-by: Mia Koen <mia.koen@nordicsemi.no>
2023-12-01 10:56:18 +00:00
Flavio Ceolin b43271dc2d doc: vuln: Disclose information about CVE-2023-5055
Information about CVE-2023-5055

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-11-23 10:01:30 +01:00
Flavio Ceolin 253e266fc5 doc: vuln: Disclose information about CVE-2023-5139
Information about CVE-2023-5139

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-27 10:52:26 +02:00
Flavio Ceolin 31a92fc5e3 doc: vuln: Add information about CVE-2023-5753
Information about CVE-2023-5753

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-24 23:49:59 +02:00
Flavio Ceolin 05fb54b090 doc: security: Update info about tools
Since there are multiple static analysis tools being used
now, it is better to change references for a particular one
and just point to static analysis section in the documentation.

JIRA is no longer used for tracking security issues. Update it
to Github.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-20 15:11:01 +02:00
Flavio Ceolin 90b9809c6f doc: security: cve-2023-4257 left embargo
Disclose information about cve-2023-4257.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-14 18:43:49 +03:00
Flavio Ceolin 52cf7e6fdf doc: vuln: Add information about CVE-2023-4263
Information about CVE-2023-4263

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-14 18:43:27 +03:00
Flavio Ceolin 49d4ad9315 doc: vuln: Add information about CVE-2023-5563
Information about CVE-2023-5563

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-13 20:19:51 +03:00
Flavio Ceolin b1fdce6336 doc: vuln: Add information about CVE-2023-4259
Information about CVE-2023-4259

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-10 21:11:33 +03:00
Flavio Ceolin 29f6ea431d doc: vuln: Add information about CVE-2023-3725
Information about CVE-2023-3725

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-09 10:16:53 +02:00
Benjamin Cabé a601b43ef8 security: doc: add missing headings
Add headings for 2022 and 2023 CVEs to make document navigation easier.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2023-10-06 13:58:51 +01:00
Flavio Ceolin 4667a0c07e doc: vuln: Add information about CVE-2023-4260
Information about CVE-2023-4260

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-06 12:20:46 +01:00
Flavio Ceolin 66d76d4afa doc: vuln: Add CVEs under embargo
Add placeholders for CVEs under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-05 09:13:53 +01:00
Flavio Ceolin 078967671c doc: vuln: Add information about CVE-2023-4264
Information about CVE-2023-4264

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-04 21:46:57 +03:00
Flavio Ceolin e3dc860429 doc: vuln: Add information about CVE-2023-4262
Information about CVE-2023-4262

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-03 15:36:28 +01:00
Flavio Ceolin 390fcd9adf doc: vuln: Add information about CVE-2023-5184
Information about CVE-2023-5184

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-02 16:58:21 +01:00
Flavio Ceolin 59c501c6df doc: security: Add information about backports
Clarify about how to proceed with backports for vulnerabilities.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-09-27 20:15:56 -04:00
Flavio Ceolin f4baa2b094 doc: vuln: Add information about CVE-2023-4258
Information about CVE-2023-4258

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-09-26 08:39:16 +02:00
Flavio Ceolin 3c1394c17a doc: vulnerabilities: Add information about CVE-2023-4265
Add information about CVE-2023-4265

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-08-16 15:05:35 +02:00
Flavio Ceolin 675726f7c0 doc: vulnerabilities: Add information about CVE-2023-1902
Add information about CVE-2023-1902

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-08-04 22:53:21 +00:00
Flavio Ceolin 5e4789bceb doc: vulnerabilities: Add information about CVE-2023-1901
Add information about CVE-2023-1901

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-08-04 22:53:21 +00:00
Flavio Ceolin b7f35a8f29 doc: vulnerabilities: Add information about new vulnerabilities
Add a placeholder for CVE-2023-1901 and CVE-2023-1902.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-06-15 13:55:07 -04:00
Flavio Ceolin 40312a8578 doc: vulnerabilities: Add information about CVE-2023-0779
Add information about CVE-2023-0779

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-06-02 18:59:27 -04:00
Flavio Ceolin d3193eae33 doc: vulnerabilities: Add information about CVE-2023-0397
Add information about CVE-2023-0397

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-06-02 18:59:27 -04:00
Benjamin Cabé 5e36dc52ec doc: security: Refresh hardening tool doc page
Improved the wording of the Hardening tool documentation to better
reflect that it does suggestions for both options that could be enabled
for improved security, as well as options that should be disabled for
they may expose to vulnerabilities. Also fixed the "Usage" section which
was stale.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2023-05-22 12:21:19 +02:00
Christian Schlotter 951a37d5a0 doc: security: Unify style
Unify style in Zephyr Security Overview.

Signed-off-by: Christian Schlotter <christian.schlotter@zeiss.com>
2023-04-21 16:33:16 +02:00
Flavio Ceolin 68d421e73c docs: security: Add published CVEs information
Add information about 3 CVEs recently published.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-02-15 19:22:24 +09:00
Flavio Ceolin 05d3b57851 doc: security: Disclose CVE information
Add information about CVE-2022-2993

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-01-07 21:34:33 +01:00
Flavio Ceolin a61ca79041 doc: vulnerabilities: Add information about CVE-2022-2741
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-11-01 12:01:00 +01:00
Flavio Ceolin ea8c6dbc03 doc: vulnerabilities: Add information about CVE-2022-1041
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-11-01 12:01:00 +01:00
Flavio Ceolin d170982947 doc: vulnerabilities: Add information about CVE-2022-1042
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-11-01 12:01:00 +01:00
Flavio Ceolin 01a02e6a29 doc: vulnerabilities: Add information about CVE-2022-1841
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-11-01 12:01:00 +01:00
Stephanos Ioannidis 8a7eb68c0f doc: security: Fix outdated link
This commit updates the outdated link to "OWASP Top Ten Project".

Signed-off-by: Stephanos Ioannidis <stephanos.ioannidis@nordicsemi.no>
2022-09-29 12:20:14 +02:00
Flavio Ceolin b26ea8b428 vulnerabilities: Add CVE information
Add information about CVE-2022-0553.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-06-06 17:59:28 +02:00
Flavio Ceolin 5b8cc4f6f3 vulnerabilities: Add vulnerabilities under embargo
Add entries for vulnerabilities under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-05-25 13:34:52 -07:00
Anas Nashif 0e727cf5a9 doc: get rid of reference section
Move last remaining items from reference section to the appropriate new
section in the new structure.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2022-04-07 16:35:19 +02:00
Nazar Kazakov f483b1bc4c everywhere: fix typos
Fix a lot of typos

Signed-off-by: Nazar Kazakov <nazar.kazakov.work@gmail.com>
2022-03-18 13:24:08 -04:00
Flavio Ceolin e14d07a869 security: docs: Add CVE-2021-3966
Add information about CVE-2021-3966

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-02-17 19:05:08 -05:00
Flavio Ceolin ead018cb12 security: docs: Add CVE-2021-3861
Add information about CVE-2021-3861

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-02-08 07:02:36 -05:00