Skip to content
OpenAdvisories
Unscored RHSA-2013:0993 1 CVE

Red Hat Security Advisory: openstack-swift security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift 0:1.8.0-6.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-account 0:1.8.0-6.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-container 0:1.8.0-6.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-doc 0:1.8.0-6.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-object 0:1.8.0-6.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-proxy 0:1.8.0-6.el6ost

Vulnerabilities 1

  • High —
    CVE-2013-2161

    OpenStack Swift Unchecked user input in XML responses

    XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name.

    swift swift Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=967631
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=972988
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0993.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-2161
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2161
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2161