horizon (2012.1.3+stable~20120815-691dd2-0ubuntu1.1) precise-security;
urgency=low
* SECURITY UPDATE: open redirect / phishing attack via "next"
parameter (LP: #1039077)
- debian/patches/CVE-2012-3540.patch: disallow redirects to anywhere
other than the same origin
- CVE-2012-3540
horizon (2012.1.3+stable~20120815-691dd2-0ubuntu1) precise-proposed; urgency=low
[ Chuck Short ]
* New upstream release (LP: #1041120):
- 9b22d6 - Fixed validation check for ICMP rules. (LP: #997669)
* Dropped:
- debian/patches/CVE-2012-2094.patch: No longer needed.
- debian/patches/CVE-2012-2144.patch: No longer needed.
[ Adam Gandelman ]
* debian/patches/juju_panel-handle_catalog_exception.patch: Gracefully handle
missing endpoints in Keystone catalog during Juju environmnets.yaml
generation. (LP: #1033920)
Date: 2012-08-31 00:30:10.748853+00:00
Changed-By: Steve Beattie <[email protected]>
Maintainer: Chuck Short <[email protected]>
https://launchpad.net/ubuntu/precise/+source/horizon/2012.1.3+stable~20120815-691dd2-0ubuntu1.1
Sorry, changesfile not available.
--
Precise-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
