horizon (2014.1.3-7+deb8u2) jessie-security; urgency=medium * CVE-2016-4428: Possible client side template injection in horizon. Applied upstream patch: "Escape angularjs templating in unsafe HTML" after rebasing it for Icehouse (Closes: #828967). -- Thomas Goirand <email address hidden> Wed, 29 Jun 2016 15:24:16 +0200