OpenStack Security Advisory

  1. Bug #1567673
  2. Comment #56

Comment 56 for bug 1567673

Revision history for this message
Thomas Goirand (thomas-goirand) wrote :

FYI, the patch backported to Icehouse is available here:

http://anonscm.debian.org/cgit/openstack/horizon.git/tree/debian/patches/CVE-2016-4428_Escape_angularjs_templating_in_unsafe_HTML.patc?h=debian/icehouse&id=d74e751ce93f03240f3ad4206e93d6e7e05da55f