OpenStack Security Advisory

  1. Bug #1955556
  2. Comment #5

Comment 5 for bug 1955556

Revision history for this message
Corey Bryant (corey.bryant) wrote (last edit ):

Jeremy, it looks like the AngularJS 1.5.8 issue is patched in 1.8.2.0 of https://opendev.org/openstack/xstatic-angular but upper-constraints hasn't picked that version up yet (links are in my previous comment above). I wonder if we can get master u-c to 1.8.2.0, and get the fix cherry-picked/released with a 1.5.8.1, and move other supported stable branches u-c to 1.5.8.1.