[release-announce] horizon 15.3.2 (stein)

no-reply at openstack.org no-reply at openstack.org
Thu Nov 12 16:03:45 UTC 2020


We are ecstatic to announce the release of:

horizon 15.3.2: OpenStack Dashboard

This release is part of the stein stable release series.

The source is available from:

    https://opendev.org/openstack/horizon

Download the package from:

    https://tarballs.openstack.org/horizon/

Please report issues through:

    https://bugs.launchpad.net/horizon/+bugs

For more details, please see below.

15.3.2
^^^^^^

Security Issues

* An open redirect has been fixed, that could redirect users to
  arbitrary addresses from certain views by specifying a "next"
  parameter in the URL. Now the redirect will only work if the target
  URL is in the same domain, and uses the same protocol.

Changes in horizon 15.3.1..15.3.2
---------------------------------

9e0e333ab Fix open redirect
56feea53c Update geckodriver version to v0.27.0.


Diffstat (except docs and test files)
-------------------------------------

horizon/test/unit/workflows/test_workflows.py | 26 +++++++++++++++++++++++++-
horizon/workflows/views.py                    | 12 ++++++++++--
releasenotes/notes/bug-cd9099c1ba78d637.yaml  |  7 +++++++
4 files changed, 43 insertions(+), 4 deletions(-)







More information about the Release-announce mailing list