Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenStack 5 openstack:5::el7 | openstack-swift | 0:1.13.1-8.el7ost |
| Red Hat · OpenStack 5 openstack:5::el7 | openstack-swift-account | 0:1.13.1-8.el7ost |
| Red Hat · OpenStack 5 openstack:5::el7 | openstack-swift-container | 0:1.13.1-8.el7ost |
| Red Hat · OpenStack 5 openstack:5::el7 | openstack-swift-doc | 0:1.13.1-8.el7ost |
| Red Hat · OpenStack 5 openstack:5::el7 | openstack-swift-object | 0:1.13.1-8.el7ost |
| Red Hat · OpenStack 5 openstack:5::el7 | openstack-swift-proxy | 0:1.13.1-8.el7ost |
Vulnerabilities 2
-
High 7.5
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.
-
High 7.5
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted …
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1298905
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1298924
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0127.json
-
report
https://access.redhat.com/security/cve/CVE-2016-0737
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-0737
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-0737
-
report
https://access.redhat.com/security/cve/CVE-2016-0738
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-0738
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-0738