Skip to content
OpenAdvisories
High RHSA-2016:0328 3 CVEs

Red Hat Security Advisory: openstack-swift security update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Gluster Storage 3 storage:3.1:server:el7 openstack-swift 0:1.13.1-8.el7ost
Red Hat · Gluster Storage 3 storage:3.1:server:el7 openstack-swift-account 0:1.13.1-8.el7ost
Red Hat · Gluster Storage 3 storage:3.1:server:el7 openstack-swift-container 0:1.13.1-8.el7ost
Red Hat · Gluster Storage 3 storage:3.1:server:el7 openstack-swift-doc 0:1.13.1-8.el7ost
Red Hat · Gluster Storage 3 storage:3.1:server:el7 openstack-swift-object 0:1.13.1-8.el7ost
Red Hat · Gluster Storage 3 storage:3.1:server:el7 openstack-swift-proxy 0:1.13.1-8.el7ost

Vulnerabilities 3

  • High 7.5
    CVE-2016-0737

    OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

    OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

    swift swift swift Debian Ubuntu PyPI
  • High 7.5
    CVE-2016-0738

    OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

    OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted …

    swift swift swift Debian Ubuntu PyPI
  • Medium —
    CVE-2015-5223

    OpenStack Object Storage (Swift) Sensitive Data Exposure

    OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container.

    swift swift swift Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298905
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1298924
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0328.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5223
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1255622
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5223
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5223
  • report
    https://access.redhat.com/security/cve/CVE-2016-0737
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0737
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0737
  • report
    https://access.redhat.com/security/cve/CVE-2016-0738
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0738
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0738