Stein Series Release Notes


Security Issues

  • Uses json.loads instead of eval() for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under.


New Features

  • Add support for specifying the affinity policy to use with instance reservations. This feature is available in Blazar starting with the Stein release.