Skip to content
OpenAdvisories
Medium RHSA-2023:1277 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform (openstack-swift) security update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 openstack-swift-plugin-swift3 0:1.12.1-1.el7ost
Red Hat · OpenStack 16 openstack:16.1::el8 openstack-swift 0:2.23.2-1.20230201163512.eef87ee.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 openstack-swift-account 0:2.23.2-1.20230201163512.eef87ee.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 openstack-swift-container 0:2.23.2-1.20230201163512.eef87ee.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 openstack-swift-object 0:2.23.2-1.20230201163512.eef87ee.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 openstack-swift-proxy 0:2.23.2-1.20230201163512.eef87ee.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 python3-swift 0:2.23.2-1.20230201163512.eef87ee.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-swift 0:2.23.4-2.20220422185313.2829195.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-swift-account 0:2.23.4-2.20220422185313.2829195.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-swift-container 0:2.23.4-2.20220422185313.2829195.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-swift-object 0:2.23.4-2.20220422185313.2829195.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-swift-proxy 0:2.23.4-2.20220422185313.2829195.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python3-swift 0:2.23.4-2.20220422185313.2829195.el8ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2022-47950

    OpenStack Swift XML external entities (XXE) Injection

    An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read…

    swift swift swift Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2160618
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1277.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-47950
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-47950
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-47950
  • article
    https://launchpad.net/bugs/1998625