Security update for openstack-swift (important)

2015-10-30T12:09:49
ID SUSE-SU-2015:1846-1
Type suse
Reporter Suse
Modified 2015-10-30T12:09:49

Description

openstack-swift was updated to fix three security issues.

These security issues were fixed: - CVE-2015-1856: OpenStack Object Storage (Swift), when allow_version is configured, allowed remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container (bsc#927793). - CVE-2014-7960: OpenStack Object Storage (Swift) allowed remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined (bsc#900253). - CVE-2015-5223: Information leak via Swift tempurls (bsc#942641).