75 Commits

Author SHA1 Message Date
Flavio Ceolin
b7f35a8f29 doc: vulnerabilities: Add information about new vulnerabilities
Add a placeholder for CVE-2023-1901 and CVE-2023-1902.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-06-15 13:55:07 -04:00
Flavio Ceolin
40312a8578 doc: vulnerabilities: Add information about CVE-2023-0779
Add information about CVE-2023-0779

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-06-02 18:59:27 -04:00
Flavio Ceolin
d3193eae33 doc: vulnerabilities: Add information about CVE-2023-0397
Add information about CVE-2023-0397

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-06-02 18:59:27 -04:00
Benjamin Cabé
5e36dc52ec doc: security: Refresh hardening tool doc page
Improved the wording of the Hardening tool documentation to better
reflect that it does suggestions for both options that could be enabled
for improved security, as well as options that should be disabled for
they may expose to vulnerabilities. Also fixed the "Usage" section which
was stale.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2023-05-22 12:21:19 +02:00
Christian Schlotter
951a37d5a0 doc: security: Unify style
Unify style in Zephyr Security Overview.

Signed-off-by: Christian Schlotter <christian.schlotter@zeiss.com>
2023-04-21 16:33:16 +02:00
Flavio Ceolin
68d421e73c docs: security: Add published CVEs information
Add information about 3 CVEs recently published.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-02-15 19:22:24 +09:00
Flavio Ceolin
05d3b57851 doc: security: Disclose CVE information
Add information about CVE-2022-2993

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2023-01-07 21:34:33 +01:00
Flavio Ceolin
a61ca79041 doc: vulnerabilities: Add information about CVE-2022-2741
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-11-01 12:01:00 +01:00
Flavio Ceolin
ea8c6dbc03 doc: vulnerabilities: Add information about CVE-2022-1041
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-11-01 12:01:00 +01:00
Flavio Ceolin
d170982947 doc: vulnerabilities: Add information about CVE-2022-1042
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-11-01 12:01:00 +01:00
Flavio Ceolin
01a02e6a29 doc: vulnerabilities: Add information about CVE-2022-1841
Add information for published CVE.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-11-01 12:01:00 +01:00
Stephanos Ioannidis
8a7eb68c0f doc: security: Fix outdated link
This commit updates the outdated link to "OWASP Top Ten Project".

Signed-off-by: Stephanos Ioannidis <stephanos.ioannidis@nordicsemi.no>
2022-09-29 12:20:14 +02:00
Flavio Ceolin
b26ea8b428 vulnerabilities: Add CVE information
Add information about CVE-2022-0553.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-06-06 17:59:28 +02:00
Flavio Ceolin
5b8cc4f6f3 vulnerabilities: Add vulnerabilities under embargo
Add entries for vulnerabilities under embargo.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-05-25 13:34:52 -07:00
Anas Nashif
0e727cf5a9 doc: get rid of reference section
Move last remaining items from reference section to the appropriate new
section in the new structure.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2022-04-07 16:35:19 +02:00
Nazar Kazakov
f483b1bc4c everywhere: fix typos
Fix a lot of typos

Signed-off-by: Nazar Kazakov <nazar.kazakov.work@gmail.com>
2022-03-18 13:24:08 -04:00
Flavio Ceolin
e14d07a869 security: docs: Add CVE-2021-3966
Add information about CVE-2021-3966

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-02-17 19:05:08 -05:00
Flavio Ceolin
ead018cb12 security: docs: Add CVE-2021-3861
Add information about CVE-2021-3861

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-02-08 07:02:36 -05:00
Flavio Ceolin
2a0ae5edac security: docs: Add CVE-2021-3835
Add information about CVE 2021-3835

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-02-08 07:02:36 -05:00
Flavio Ceolin
449c37808a doc: security: Fix one vulnerability report
The issue was properly fixed but this document was not updated.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2022-01-13 18:34:15 -05:00
Flavio Ceolin
31a911ecc2 doc: security: Remove unused image
zephyr-workflow is no longer used.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2021-12-01 05:03:59 -05:00
Flavio Ceolin
d21bfcae2e docs: security: s/JIRA/GitHub
Update vulnerability report / tracking information. Zephyr is no
longer using JIRA.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2021-12-01 05:03:59 -05:00
Flavio Ceolin
f7b320a7c3 doc: security: Update information about CVE-2021-3436
Update old CVE the proper information.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2021-10-06 18:18:06 -04:00
Flavio Ceolin
6c488c8556 doc: security: Update information about CVE-2021-3510
Update old CVE the proper information.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2021-10-06 18:18:06 -04:00
Flavio Ceolin
613b38c24b doc: security: Update information about CVE-2021-3625
Update CVE that left embargo with the proper information.

Signed-off-by: Flavio Ceolin <flavio.ceolin@intel.com>
2021-10-06 18:18:06 -04:00