Debian Patches

Status for horizon/3:18.6.2-5+deb11u2

Patch Description Author Forwarded Bugs Origin Last update
fixed-horizon-MANIFEST.in.patch Fixed horizon MANIFEST.in
===================================================================
Thomas Goirand <zigo@debian.org> not-needed 2015-09-26
fix-manage.py-sheebang.patch Fix manage.py sheebang Thomas Goirand <zigo@debian.org> no 2018-02-24
Dont_load_user_role_assignment_or_groups_tabs_for_non-admins.patch Don't load user role assignment or groups tabs for non-admins As a non admin user, navigate to Identity -> Users. Then click on the
username of your user to go to the detail page.
.
Only the allowed Overview tab is visible.
.
The view shows three tabs: Overview, Role assignments, Groups. Click on
either Role assignments or Groups. An error will appear, showing that
the API call is unauthorised, and the table content will fail to load.
.
This change fixes the issue by conditionally loading the tabs based on
policy.

diff --git a/openstack_dashboard/dashboards/identity/users/tabs.py b/openstack_dashboard/dashboards/identity/users/tabs.py
index 30bcd0a..fe8fa3b 100644
Mark Goddard <mark@stackhpc.com> no upstream, https://review.opendev.org/c/openstack/horizon/+/783547 2021-07-14
do-not-create-volume-by-default-when-launching-instance.patch Do not create volume by default when launching instance By default, Horizon creates a volume and wants users to boot from it, which is
not what a user should do by default. This patch restors sanity in the default
behavior.
Thomas Goirand <zigo@debian.org> no 2021-07-14
CVE-2022-45582_Fix_success_url_parameter_issue_for_Edit_Snapshot.patch CVE-2022-45582 Fix success_url parameter issue for Edit Snapshot The "success_url" param is used when updating the project snapshot
[1] and it lacks sanitizing the input URL that allows an attacker to
redirect the user to another website. This patch update 'Updateview'
class to not use the "sucess_url" method.

===================================================================
manchandavishal <manchandavishal143@gmail.com> yes debian upstream upstream, https://review.opendev.org/c/openstack/horizon/+/862902 2023-09-06

All known versions for source package 'horizon'

Links