Skip to content
OpenAdvisories
Critical RHSA-2012:1379 1 CVE

Red Hat Security Advisory: openstack-swift security update

Published Sep 13, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · OpenStack 1 openstack:1::el6 openstack-swift 0:1.4.8-5.el6
Red Hat · OpenStack 1 openstack:1::el6 openstack-swift-account 0:1.4.8-5.el6
Red Hat · OpenStack 1 openstack:1::el6 openstack-swift-container 0:1.4.8-5.el6
Red Hat · OpenStack 1 openstack:1::el6 openstack-swift-doc 0:1.4.8-5.el6
Red Hat · OpenStack 1 openstack:1::el6 openstack-swift-object 0:1.4.8-5.el6
Red Hat · OpenStack 1 openstack:1::el6 openstack-swift-proxy 0:1.4.8-5.el6

Vulnerabilities 1

  • Critical 9.8
    CVE-2012-4406

    OpenStack Object Storage (swift) Code Injection vulnerability

    OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.

    swift swift Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=854757
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1379.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-4406
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4406
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4406