[Secure-testing-team] Bug#838017: manila-ui: CVE-2016-6519: persistent XSS in metadata field

[Salvatore Bonaccorso]

Source: manila-ui
Version: 2.1.0-2
Severity: grave
Tags: security upstream patch

Hi,

the following vulnerability was published for manila-ui.

CVE-2016-6519[0]:
persistent XSS in metadata field

[1] and [2] contain both patches.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-6519
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1375147
[2] https://bugzilla.novell.com/show_bug.cgi?id=988935

Regards,
Salvatore