--===============3807657350684703562==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
 boundary="R3G7APHDIzY6R/pk"
Content-Disposition: inline


--R3G7APHDIzY6R/pk
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-1565-1
September 13, 2012

horizon vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

OpenStack Horizon could help expose sensitive information.

Software Description:
- horizon: Web interface for OpenStack cloud infrastructure

Details:

Thomas Biege discovered that the Horizon authentication mechanism
did not validate the next parameter. An attacker could use this to
construct a link to legitimate OpenStack web dashboard that redirected
the user to a malicious website after authentication.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  openstack-dashboard             2012.1.3+stable~20120815-691dd2-0ubuntu1.1
  python-django-horizon           2012.1.3+stable~20120815-691dd2-0ubuntu1.1

In general, a standard system update will make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1565-1
  CVE-2012-3540

Package Information:
  https://launchpad.net/ubuntu/+source/horizon/2012.1.3+stable~20120815-691dd2-0ubuntu1.1


--R3G7APHDIzY6R/pk
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=3mQ3
-----END PGP SIGNATURE-----

--R3G7APHDIzY6R/pk--


--===============3807657350684703562==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============3807657350684703562==--