CVE-2014-7960

Publication date 17 October 2014

Last updated 24 July 2024

OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
swift	15.04 vivid	Fixed 2.2.2-0ubuntu1
	14.10 utopic	Fixed 2.2.0-0ubuntu1
	14.04 LTS trusty	Fixed 1.13.1-0ubuntu1.2
	12.04 LTS precise	Fixed 1.4.8-0ubuntu2.5
	10.04 LTS lucid	Not in release

Notes

jdstrand

per upstream, this is a minor issue

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
swift	Upstream: https://review.openstack.org/#/c/126645/ Upstream: https://review.openstack.org/gitweb?p=openstack%2Fswift.git;a=commitdiff;h=5b2c27a5874c2b5b0a333e4955b03544f6a8119f

References

Related Ubuntu Security Notices (USN)