Skip to content
OpenAdvisories
Unscored RHSA-2015:1684 1 CVE

Red Hat Security Advisory: openstack-swift security update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el6 openstack-swift 0:1.13.1-6.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-swift-account 0:1.13.1-6.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-swift-container 0:1.13.1-6.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-swift-doc 0:1.13.1-6.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-swift-object 0:1.13.1-6.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-swift-proxy 0:1.13.1-6.el6ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-swift 0:1.13.1-5.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-swift-account 0:1.13.1-5.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-swift-container 0:1.13.1-5.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-swift-doc 0:1.13.1-5.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-swift-object 0:1.13.1-5.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-swift-proxy 0:1.13.1-5.el7ost

Vulnerabilities 1

  • Medium —
    CVE-2015-1856

    OpenStack Swift Unauthorized delete of versioned Swift object

    OpenStack Object Storage (Swift) before 2.3.0, when allow_version is configured, allows remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container.

    swift swift swift Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1209994
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1684.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-1856
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1856
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1856