lp://staging/~openstack-ubuntu-testing/horizon/precise-essex-proposed

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #944235: python-django-horizon has a missing dep on python-django-nose	High	Fix Released
Bug #947118: Horizon package on Precise throws warning during installation	High	Fix Released
Bug #968850: intermittent errors and login page	Undecided	Invalid
Bug #988435: Requires memcached to also be installed..	High	Fix Released
Bug #997669: When adding ICMP rule, the type/code is being validated as from/to ports	High	Fix Released
Bug #1033920: Dashboard raises a ServiceCatalogException when attempting to download juju settings	Undecided	Fix Released
Bug #1041120: Meta bug for tracking Openstack Stable Updates	Undecided	Invalid

Link a bug report

Related blueprints

107. By Yolanda Robla on 2012-12-17

* Resynchronize with stable/essex (5ce39422):
  - [7e651d7] stable/essex horizon installs unusable version of glance
    (LP: #1057125)
  - [35eada8] open redirect / phishing attack via "next" parameter
    (CVE-2012-3540)
  - [8889311] TypeError when trying to delete an unnamed volume via dashboard
    (LP: #1031291)
  - [f862d9e] Wrong 'Download CSV Summary' link (LP: #1020555)
* Dropped patches, superseeded by snapshot:
  - debian/patches/CVE-2012-3540.patch [35eada8]
* SECURITY UPDATE: open redirect / phishing attack via "next"
  parameter (LP: #1039077)
  - debian/patches/CVE-2012-3540.patch: disallow redirects to anywhere
    other than the same origin
  - CVE-2012-3540

106. By Adam Gandelman on 2012-12-12

Revert changelog.

105. By Yolanda Robla on 2012-12-12

Resynchronize with stable/essex (5ce39422) LP: #1089488:
modified LP bug number in changelog

104. By Yolanda Robla on 2012-12-12

Resynchronize with stable/essex (5ce39422) LP: #1089466:
modified changelog to add bug number

103. By Yolanda Robla on 2012-12-12

[ Yolanda Robla ]
* Dropped patches, applied upstream:
  - debian/patches/CVE-2012-3540.patch: disallow redirects to anywhere
    other than the same origin
* Resynchronize with stable/essex (5ce39422):
  - [7e651d7] stable/essex horizon installs unusable version of glance
  - [35eada8] open redirect / phishing attack via "next" parameter
  - [8889311] TypeError when trying to delete an unnamed volume via dashboard
  - [f862d9e] Wrong 'Download CSV Summary' link

102. By Adam Gandelman on 2012-08-24

Fix changelog.

101. By Adam Gandelman on 2012-08-24

New upstream release (LP: #1041120):

100. By Chuck Short on 2012-08-22

9b22d6 - Fixed validation check for ICMP rules. (LP: #997669)

99. By Chuck Short on 2012-08-21

  - Fixed validation check for ICMP rules. (LP: #997669)
* Dropped:
  - debian/patches/CVE-2012-2094.patch: No longer needed.
  - debian/patches/CVE-2012-2144.patch: No longer needed.
* SECURITY UPDATE: fix XSS when refreshing logs
  - debian/patches/CVE-2012-2094.patch: interpret logs as text
  - CVE-2012-2094
* SECURITY UPDATE: fix session fixation and reuse
  - debian/patches/CVE-2012-2144.patch: properly verify existing session and
    also log user out on error
  - CVE-2012-2144

98. By Adam Gandelman on 2012-08-16

debian/patches/juju_panel-handle_catalog_exception.patch: Gracefully handle
missing endpoints in Keystone catalog during Juju environmnets.yaml
generation. (LP: #1033920)