Lucene search

K
suseSuseSUSE-SU-2015:1846-1
HistoryOct 30, 2015 - 12:09 p.m.

Security update for openstack-swift (important)

2015-10-3012:09:49
lists.opensuse.org
12

0.007 Low

EPSS

Percentile

77.8%

openstack-swift was updated to fix three security issues.

These security issues were fixed:

  • CVE-2015-1856: OpenStack Object Storage (Swift), when allow_version is
    configured, allowed remote authenticated users to delete the latest
    version of an object by leveraging listing access to the
    x-versions-location container (bsc#927793).
  • CVE-2014-7960: OpenStack Object Storage (Swift) allowed remote
    authenticated users to bypass the max_meta_count and other metadata
    constraints via multiple crafted requests which exceed the limit when
    combined (bsc#900253).
  • CVE-2015-5223: Information leak via Swift tempurls (bsc#942641).