yahoo-eng-team team mailing list archive

[Launchpad Bug Tracker <1057125@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package horizon -
2012.1.3+stable-20130423-5ce39422-0ubuntu1

---------------
horizon (2012.1.3+stable-20130423-5ce39422-0ubuntu1) precise-proposed; urgency=low

  * Resynchronize with stable/essex (LP: #1089488)
    - [7e651d7] stable/essex horizon installs unusable version of glance
      (LP: #1057125)
    - [35eada8] open redirect / phishing attack via "next" parameter
      (LP: #1039077)
    - [8889311] TypeError when trying to delete an unnamed volume via dashboard
      (LP: #1031291)
    - [f862d9e] Wrong 'Download CSV Summary' link (LP: #1020555)
    - [9b22d68] When adding ICMP rule, the type/code is being validated as
      from/to ports (LP: #997669)
    - [52bbba1] Added --only-selenium option in run_tests.sh
  * Dropped patches, superseeded by new snapshot:
    - debian/patches/CVE-2012-3540.patch [35eada8]
 -- Yolanda <yolanda.robla@xxxxxxxxxxxxx>   Wed, 24 Apr 2013 15:46:28 +0200

** Changed in: horizon (Ubuntu Precise)
       Status: Fix Committed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-3540

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1057125

Title:
  stable/essex horizon installs unusable version of glance

Status in OpenStack Dashboard (Horizon):
  Invalid
Status in OpenStack Dashboard (Horizon) essex series:
  Fix Released
Status in “horizon” package in Ubuntu:
  Fix Released
Status in “horizon” source package in Precise:
  Fix Released

Bug description:
  The pip-requires file installs the master version of glance, not the
  stable/essex version. Horizon needs the glance available in
  stable/essex glance which has been removed in master.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1057125/+subscriptions