Red Hat Security Advisory

RHSA-2016:0128

openstack-swift security update

Released 2016-02-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-swift-2.2.0-6.el7ost, openstack-swift-account-2.2.0-6.el7ost, openstack-swift-container-2.2.0-6.el7ost +3

Fixes 2 records

TI-2016-00662 CVE-2016-0738 · GHSA-fxwr-2vxm-cg7p

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1…

MEDIUM 40

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource co…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03959 Published 2016-01-29 Partial fix · 2.3.1, 2.5.1 CWE-399

TI-2016-00661 CVE-2016-0737 · GHSA-972c-cfv8-2hq8

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections…

MEDIUM 40

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted request…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03925 Published 2016-01-29 Partial fix · 2.4.0 CWE-399