-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 05 Sep 2023 11:31:00 +0200 Source: horizon Architecture: source Version: 3:23.0.0-5+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1050518 Changes: horizon (3:23.0.0-5+deb12u1) bookworm; urgency=medium . * CVE-2022-45582: Open redirect/phishing attack via "success_url" parameter, add upstream patch: "Fix success_url parameter issue for Edit Snapshot" (Closes: #1050518). Checksums-Sha1: fb0bd3f98c0b5458d5c18da5952935cfbe709847 4569 horizon_23.0.0-5+deb12u1.dsc d8c78292cc69c6af989ab65eab5b13d2e0969ed8 34208 horizon_23.0.0-5+deb12u1.debian.tar.xz 94ede667789fed27806b7a84daf3a55e2d9c9c50 17989 horizon_23.0.0-5+deb12u1_amd64.buildinfo Checksums-Sha256: be6d2ea3994038f5ff83f10d6d3fccfbba6180f8d7229ab2c96b4f68c1103908 4569 horizon_23.0.0-5+deb12u1.dsc e9fd31268fc5a4b1adf1039a1c68a80c846e4527970cd6830101e7b9df49061f 34208 horizon_23.0.0-5+deb12u1.debian.tar.xz af3b18ebedb4200a999a6dd825b09b39b33d2a4548c42a3d9a3a9528247ef95a 17989 horizon_23.0.0-5+deb12u1_amd64.buildinfo Files: 176607bc89b9e9b8939a23a1ddcc7acc 4569 net optional horizon_23.0.0-5+deb12u1.dsc 5d051c9447831d61ee2e36cbfa113bf7 34208 net optional horizon_23.0.0-5+deb12u1.debian.tar.xz e778e0e92505b58d8ddfcd5b0e936241 17989 net optional horizon_23.0.0-5+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmT4MyEACgkQ1BatFaxr Q/6cyA/+Lhnl9B8rv++aW6KOi5CONuKwCpIlZvw04kbCw9apm0JuF2gCEoInkkCY w+JHSvB3rSNK9LVW+pKxMGF6n8k/E1zB/5cUdEYiKZ3ILhA4AxYWNHvo0eD1pxS2 ktrXips5/MgimM3q6vcPmscGoGXgBR5NyV5197CwRE6eSoHmBDsQ1DKHOyxp2xBj n43uCrdecE+6skXjT2Be8USTFOZF1PLNXApPeW4/wO4FmufNvobKDHZeZf4f0fim d07i+Svr8A4DJfYnpqPnqXEB287QHYa7CZVPjc0f/MnSr9vKYcQHN5rknLAcIWK8 eGwCtXuFnjGrr5Ht+EmK3zjrGQYi9sADTp4R/PY+f5Aa70AoBIPicVVDWpdMtrGe lMl0VpTEjZNiHKTAKG+THA+UP4jYcGa5dwlQZXTQoU+87Qi0Xb1X2GcaL4y3zG7/ T0W/ilHN7VMYKjH5G9jilY9AnbJeoemnB0nbz1QXa5+Uh3zDwmoGoAAu4fMGW8m/ grUoR/qcjBI1wE/72Ls7cbKnk8br5Qk1iQNyLhrXwSFrzZvsuyUYgqunvKkbDvRg jMc/ktylq7qT4joIrK+9Xb8ntDSxfVbTAndGCD4p6osRuea24XpN2ZQSw2R9Hkkw MjuFApl1uCApqoFXyNk0eZAIZVe7h3ZhBhf1B75Zni7Dhb3y43A= =jVOx -----END PGP SIGNATURE-----