Red Hat Security Advisory

RHSA-2016:0328

openstack-swift security update

Released 2016-03-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Gluster Storage Server 3.1 on RHEL-7 openstack-swift-1.13.1-8.el7ost, openstack-swift-account-1.13.1-8.el7ost, openstack-swift-container-1.13.1-8.el7ost +3

Fixes 3 records

TI-2016-00662 CVE-2016-0738 · GHSA-fxwr-2vxm-cg7p

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1…

MEDIUM 40

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource co…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03959 Published 2016-01-29 Partial fix · 2.3.1, 2.5.1 CWE-399

TI-2016-00661 CVE-2016-0737 · GHSA-972c-cfv8-2hq8

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections…

MEDIUM 40

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted request…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03925 Published 2016-01-29 Partial fix · 2.4.0 CWE-399

TI-2015-04385 CVE-2015-5223 · GHSA-q45h-chc8-hvp6

OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive…

LOW 28

OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02605 Published 2015-10-26 Partial fix · 2.4.0 CWE-200