Skip to content
OpenAdvisories
High RHSA-2014:0367 1 CVE

Red Hat Security Advisory: openstack-swift security update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift 0:1.8.0-8.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-account 0:1.8.0-8.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-container 0:1.8.0-8.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-doc 0:1.8.0-8.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-object 0:1.8.0-8.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-swift-proxy 0:1.8.0-8.el6ost

Vulnerabilities 1

  • High 7.5
    CVE-2014-0006

    OpenStack Swift Discloses Secret URLs to Timing Attack

    The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.

    swift swift Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1051670
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0367.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0006
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0006
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0006