[ubuntu/precise-security] horizon 2012.1.3+stable~20120815-691dd2-0ubuntu1.1 (Accepted)

[Steve Beattie]

horizon (2012.1.3+stable~20120815-691dd2-0ubuntu1.1) precise-security; urgency=low

  * SECURITY UPDATE: open redirect / phishing attack via "next"
    parameter (LP: #1039077)
    - debian/patches/CVE-2012-3540.patch: disallow redirects to anywhere
      other than the same origin
    - CVE-2012-3540

horizon (2012.1.3+stable~20120815-691dd2-0ubuntu1) precise-proposed; urgency=low

  [ Chuck Short ]
  * New upstream release (LP: #1041120):
    - 9b22d6 - Fixed validation check for ICMP rules. (LP: #997669)
  * Dropped:
    - debian/patches/CVE-2012-2094.patch: No longer needed.
    - debian/patches/CVE-2012-2144.patch: No longer needed.

   [ Adam Gandelman ]
   * debian/patches/juju_panel-handle_catalog_exception.patch: Gracefully handle
    missing endpoints in Keystone catalog during Juju environmnets.yaml
    generation. (LP: #1033920)

Date: 2012-08-31 00:30:10.748853+00:00
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Maintainer: Chuck Short <chuck.short at canonical.com>
https://launchpad.net/ubuntu/precise/+source/horizon/2012.1.3+stable~20120815-691dd2-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.