Commit graph

217 commits

Author SHA1 Message Date
Flavio Ceolin
7fc502389d doc: security/etsi: Provision 6.1.4 assessment
Add self-assessment for provision 6.1.4

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-27 03:40:32 -07:00
Flavio Ceolin
74d192f8b6 doc: security/etsi: Provision 5.3.6 assessment
Add self-assessment for provision 5.3.6

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-27 03:40:32 -07:00
Flavio Ceolin
a81591d3ec doc: security/etsi: Provision 5.3.5 assessment
Add self-assessment for provision 5.3.5

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-27 03:40:32 -07:00
Flavio Ceolin
b170943d9f doc: security/etsi: Provision 5.3.3 assessment
Add self-assessment for provision 5.3.3

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-27 03:40:32 -07:00
Flavio Ceolin
5ac871b077 doc: security/etsi: Provision 5.3.4 assessment
Add self-assessment for provision 5.3.4

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-27 03:40:32 -07:00
Flavio Ceolin
3abc5da089 doc: security/etsi: Provision 5.1.2 assessment
Add self-assessment for provision 5.1.2

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-27 03:40:32 -07:00
Flavio Ceolin
da255c3e3d doc: security/etsi: Provision 5.2.2 assessment
Add self-assessment for provision 5.2.2

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-27 03:40:32 -07:00
Flavio Ceolin
2c3e1a3047 doc: security/etsi: Provision 5.2.1 assessment
Add self-assessment for provision 5.2.1

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-27 03:40:32 -07:00
Flavio Ceolin
8d446d345b doc: security: Add ETSI 303 645 standard
Add a new section for standards with ETSI 303-645 in
the security related documentation.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-27 03:40:32 -07:00
Alex Bellon
a655deb046 docs: security: Create CVE-2024 section
Create new section for CVE-2024.

Signed-off-by: Alex Bellon <github@alex-bellon.com>
2024-05-24 07:50:38 -04:00
Flavio Ceolin
cec23830e4 doc: vuln: Add CVE under embargo
Add an entry to CVE-2024-4785

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-05-16 18:53:02 -04:00
Flavio Ceolin
2e053e8116 doc: security: CVE-2024-3077 left embargo
Disclose information about CVE-2024-3077.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-04-04 12:22:57 -04:00
Flavio Ceolin
9c27b21ecb doc: security: Add information about Open Security Training
Add information and links for open source security training.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-03-26 16:16:08 -04:00
Flavio Ceolin
6704557bf9 doc: security: cve-2023-7060 left embargo
Disclose information about cve-2023-7060.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-03-21 17:51:31 -04:00
Flavio Ceolin
18c96b64c7 doc: security: cve-2023-6881 left embargo
Disclose information about cve-2023-6881.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-21 16:12:26 +01:00
Flavio Ceolin
3fb795a27f doc: security: cve-2024-1638 left embargo
Disclose information about cve-2024-1638.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-20 15:07:07 -06:00
Flavio Ceolin
a6e9f12ca8 doc: security: cve-2023-5779 left embargo
Disclose information about cve-2023-5779.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-18 18:05:51 +01:00
Flavio Ceolin
194bc9b176 doc: security: cve-2023-6249 left embargo
Disclose information about cve-2023-6249.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-18 18:05:51 +01:00
Flavio Ceolin
a8690fd862 doc: security: cve-2023-6749 left embargo
Disclose information about cve-2023-6749.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-02-18 18:05:51 +01:00
Flavio Ceolin
7d3eee7b27 doc: vuln: Add CVEs under embargo
Add placeholders for CVEs under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2024-01-05 23:57:30 +01:00
Flavio Ceolin
052590b0c1 doc: vuln: Disclose information about CVE-2023-4424
Information about CVE-2023-4424

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-12-09 15:31:42 -05:00
Mia Koen
0bcad09392 bluetooth: mesh: Doc fix Bluetooth mesh to Mesh
SIG has changed Bluetooth mesh to Bluetooth Mesh
Updating zephyr docs accordingly
Leaving out old release notes

Signed-off-by: Mia Koen <mia.koen@nordicsemi.no>
2023-12-01 10:56:18 +00:00
Flavio Ceolin
b43271dc2d doc: vuln: Disclose information about CVE-2023-5055
Information about CVE-2023-5055

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-11-23 10:01:30 +01:00
Flavio Ceolin
253e266fc5 doc: vuln: Disclose information about CVE-2023-5139
Information about CVE-2023-5139

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-27 10:52:26 +02:00
Flavio Ceolin
31a92fc5e3 doc: vuln: Add information about CVE-2023-5753
Information about CVE-2023-5753

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-24 23:49:59 +02:00
Flavio Ceolin
05fb54b090 doc: security: Update info about tools
Since there are multiple static analysis tools being used
now, it is better to change references for a particular one
and just point to static analysis section in the documentation.

JIRA is no longer used for tracking security issues. Update it
to Github.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-20 15:11:01 +02:00
Flavio Ceolin
90b9809c6f doc: security: cve-2023-4257 left embargo
Disclose information about cve-2023-4257.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-14 18:43:49 +03:00
Flavio Ceolin
52cf7e6fdf doc: vuln: Add information about CVE-2023-4263
Information about CVE-2023-4263

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-14 18:43:27 +03:00
Flavio Ceolin
49d4ad9315 doc: vuln: Add information about CVE-2023-5563
Information about CVE-2023-5563

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-13 20:19:51 +03:00
Flavio Ceolin
b1fdce6336 doc: vuln: Add information about CVE-2023-4259
Information about CVE-2023-4259

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-10 21:11:33 +03:00
Flavio Ceolin
29f6ea431d doc: vuln: Add information about CVE-2023-3725
Information about CVE-2023-3725

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-09 10:16:53 +02:00
Benjamin Cabé
a601b43ef8 security: doc: add missing headings
Add headings for 2022 and 2023 CVEs to make document navigation easier.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2023-10-06 13:58:51 +01:00
Flavio Ceolin
4667a0c07e doc: vuln: Add information about CVE-2023-4260
Information about CVE-2023-4260

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-06 12:20:46 +01:00
Flavio Ceolin
66d76d4afa doc: vuln: Add CVEs under embargo
Add placeholders for CVEs under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-05 09:13:53 +01:00
Flavio Ceolin
078967671c doc: vuln: Add information about CVE-2023-4264
Information about CVE-2023-4264

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-04 21:46:57 +03:00
Flavio Ceolin
e3dc860429 doc: vuln: Add information about CVE-2023-4262
Information about CVE-2023-4262

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-03 15:36:28 +01:00
Flavio Ceolin
390fcd9adf doc: vuln: Add information about CVE-2023-5184
Information about CVE-2023-5184

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-10-02 16:58:21 +01:00
Flavio Ceolin
59c501c6df doc: security: Add information about backports
Clarify about how to proceed with backports for vulnerabilities.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-09-27 20:15:56 -04:00
Flavio Ceolin
f4baa2b094 doc: vuln: Add information about CVE-2023-4258
Information about CVE-2023-4258

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-09-26 08:39:16 +02:00
Flavio Ceolin
3c1394c17a doc: vulnerabilities: Add information about CVE-2023-4265
Add information about CVE-2023-4265

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-08-16 15:05:35 +02:00
Flavio Ceolin
675726f7c0 doc: vulnerabilities: Add information about CVE-2023-1902
Add information about CVE-2023-1902

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-08-04 22:53:21 +00:00
Flavio Ceolin
5e4789bceb doc: vulnerabilities: Add information about CVE-2023-1901
Add information about CVE-2023-1901

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-08-04 22:53:21 +00:00
Flavio Ceolin
b7f35a8f29 doc: vulnerabilities: Add information about new vulnerabilities
Add a placeholder for CVE-2023-1901 and CVE-2023-1902.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-06-15 13:55:07 -04:00
Flavio Ceolin
40312a8578 doc: vulnerabilities: Add information about CVE-2023-0779
Add information about CVE-2023-0779

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-06-02 18:59:27 -04:00
Flavio Ceolin
d3193eae33 doc: vulnerabilities: Add information about CVE-2023-0397
Add information about CVE-2023-0397

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-06-02 18:59:27 -04:00
Benjamin Cabé
5e36dc52ec doc: security: Refresh hardening tool doc page
Improved the wording of the Hardening tool documentation to better
reflect that it does suggestions for both options that could be enabled
for improved security, as well as options that should be disabled for
they may expose to vulnerabilities. Also fixed the "Usage" section which
was stale.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2023-05-22 12:21:19 +02:00
Christian Schlotter
951a37d5a0 doc: security: Unify style
Unify style in Zephyr Security Overview.

Signed-off-by: Christian Schlotter <christian.schlotter@zeiss.com>
2023-04-21 16:33:16 +02:00
Flavio Ceolin
68d421e73c docs: security: Add published CVEs information
Add information about 3 CVEs recently published.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-02-15 19:22:24 +09:00
Flavio Ceolin
05d3b57851 doc: security: Disclose CVE information
Add information about CVE-2022-2993

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-01-07 21:34:33 +01:00
Flavio Ceolin
a61ca79041 doc: vulnerabilities: Add information about CVE-2022-2741
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-11-01 12:01:00 +01:00