Add N&N about p2 warning when installating from http or using md5

Bug: 576428
Bug: 576429
Change-Id: Ida0732a2fc089a0afb7409b863024c46d2b282eb

1 files changed, 21 insertions, 0 deletions

diff --git a/4.22/platform_isv.html b/4.22/platform_isv.html
index 1f06495b..5b67f0c9 100644
--- a/4.22/platform_isv.html
+++ b/4.22/platform_isv.html
@@ -90,9 +90,30 @@ try {
     	<li>On last tree item removal.</li>
       </ul>
     </td>
+    
   </tr>
   <!-- *********************** End of SWT *********************** -->
 
+  <!-- *********************** p2 *********************** -->
+
+  <tr>
+    <td id="p2" class="section" colspan="2"><h2>p2 Changes</h2></td>
+  </tr>
+  
+  <tr id="logUnsafe"> <!-- https://bugs.eclipse.org/bugs/show_bug.cgi?id=576429 https://bugs.eclipse.org/bugs/show_bug.cgi?id=576428 -->
+    <td class="title">Log unsafe transport or verification technologies used at installation</td>
+    <td class="content">
+    When installing from a repository, p2 now logs a warning in case some technologies used for the installation are considered unsafe.
+    Here are the cases covered so far and that will trigger a logged warning:
+    <ul>
+    <li><code>http</code> repositories are used (<code>http</code> repositories expose to CVE-2021-41033)</li>
+    <li>Artifact checksums are either missing, or none of the available digest algorithms is considered safe (eg md5).</li>
+    </ul>
+    </td>
+  </tr>
+  <!-- *********************** End of p2 *********************** -->
+
+
 </tbody>
 </table>
 <!-- ****************** END OF N&N TABLE ****************** -->