Red Hat Security Advisory

RHSA-2012:1379

openstack-swift security update

Released 2012-10-16 · Red Hat rating Important · View on Red Hat →

Fixed in

RHOS Essex Release openstack-swift-1.4.8-5.el6, openstack-swift-account-1.4.8-5.el6, openstack-swift-container-1.4.8-5.el6 +3

Fixes 1 record

TI-2012-03749 CVE-2012-4406 · GHSA-v7mh-3jgf-r26c

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle…

MEDIUM 52

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a cra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06571 Published 2012-10-22 Fixed in 1.7.0 CWE-502