Red Hat Security AdvisoryRHSA-2015:1895
openstack-swift security update
Released 2015-10-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 openstack-swift-1.13.1-7.el6ost, openstack-swift-account-1.13.1-7.el6ost, openstack-swift-container-1.13.1-7.el6ost +3
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-swift-1.13.1-7.el7ost, openstack-swift-account-1.13.1-7.el7ost, openstack-swift-container-1.13.1-7.el7ost +3
- Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-swift-2.2.0-5.el7ost, openstack-swift-account-2.2.0-5.el7ost, openstack-swift-container-2.2.0-5.el7ost +3
- Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 openstack-swift-2.3.0-2.el7ost, openstack-swift-account-2.3.0-2.el7ost, openstack-swift-container-2.3.0-2.el7ost +3
Fixes 1 record
Priority LOW 28
OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02605 · Published 2015-10-26 · Partial fix · 2.4.0 CWE-200
