yahoo-eng-team team mailing list archive

[OpenStack Infra <2070486@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/c/openstack/horizon/+/926134
Committed: https://opendev.org/openstack/horizon/commit/fd1fa88c680d2068eb47ecfa8dbfd74caf194140
Submitter: "Zuul (22348)"
Branch:    master

commit fd1fa88c680d2068eb47ecfa8dbfd74caf194140
Author: manchandavishal <manchandavishal143@xxxxxxxxx>
Date:   Mon Aug 12 17:12:06 2024 +0530

    Update XStatic-JQuery.quicksearch min. version to include latest CVE fix
    
    This patch updates XStatic-JQuery.quicksearch minimum version to ensure
    the latest security vulnerabilities are addressed.
    
    Closes-Bug: 2070486
    Change-Id: Id8d00b325ad563ca7c720c758f4da928fed176cd


** Changed in: horizon
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/2070486

Title:
  XStatic-JQuery.quicksearch is not updated in horizon

Status in OpenStack Dashboard (Horizon):
  Fix Released

Bug description:
  Currently, horizon is using XStatic-JQuery.quicksearch version 2.0.3.1 which is very old and doesn't include the latest bug fixes. It was released in May 2014. 
  We should use latest version of XStatic-JQuery.quicksearch = 2.0.3.2 [1].

  [1] https://pypi.org/project/XStatic-JQuery.quicksearch/#history

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/2070486/+subscriptions