UbuntuUpdates.org

Package "python-django-horizon"

Name: python-django-horizon

Description:

Django module providing web based interaction with OpenStack
Latest version: 2:9.1.2-0ubuntu5.2
Release: xenial (16.04)
Level: security
Repository: main
Head package: horizon
Homepage: http://launchpad.net/horizon

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-django-horizon"

All arch deb package
APT INSTALL

Other versions of "python-django-horizon" in Xenial

Repository Area Version
base main 2:9.0.0-0ubuntu2
updates main 2:9.1.2-0ubuntu5.2

Changelog

Version: 2:9.1.2-0ubuntu5.2 2021-01-05 15:06:19 UTC

  horizon (2:9.1.2-0ubuntu5.2) xenial-security; urgency=medium

  [ Chris MacNaughton ]
  * d/control: Update VCS paths for move to lp:~ubuntu-openstack-dev.

  [ Marc Deslauriers ]
  * SECURITY UPDATE: ensure next parameter is validated to prevent malicious
    URL injection
    - d/p/CVE-2020-29565.patch: Make sure the next URL is in the same origin
      as Horizon before redirecting to it.
    - CVE-2020-29565

 -- Corey Bryant <email address hidden> Mon, 14 Dec 2020 10:04:03 -0500
CVE-2020-29565 An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of v


About   -   Send Feedback to @ubuntu_updates