Publishing details

• Removed from disk on 2017-10-11.
• Removal requested on 2017-10-11.
• Deleted on 2017-10-11 by Marc Deslauriers
• Published on 2017-09-12

Changelog

swift (1.13.1-0ubuntu1.5) trusty-security; urgency=medium

  [ Jamie Strandboge ]
  * SECURITY UPDATE: disallow unsafe tempurl operations to point to
    unauthorized data
    - debian/patches/CVE-2015-5223.patch: disallow creation of DLO object
      manifests if non-safe tempurl request includes X-Object-Manifest header
    - CVE-2015-5223
    - LP: #1453948

  [ Marc Deslauriers ]
  * SECURITY UPDATE: DoS via incorrectly closed client connections
    - debian/patches/CVE-2016-0737.patch: get better at closing WSGI
      iterables in swift/common/middleware/dlo.py,
      swift/common/middleware/slo.py, swift/common/request_helpers.py,
      swift/common/swob.py, swift/common/utils.py,
      test/unit/common/middleware/helpers.py,
      test/unit/common/middleware/test_dlo.py,
      test/unit/common/middleware/test_slo.py.
    - CVE-2016-0737
  * SECURITY UPDATE: DoS via incorrectly closed server connections
    - debian/patches/CVE-2016-0738.patch: fix memory/socket leak in proxy
      on truncated SLO/DLO GET in swift/common/request_helpers.py,
      test/unit/common/middleware/test_slo.py.
    - CVE-2016-0738
  * Thanks to Red Hat for the patch backports!
  * debian/patches/fix-ubuntu-tests.patch: disable another test that no
    longer works on buildds.

 -- Marc Deslauriers <email address hidden>  Tue, 12 Sep 2017 07:36:43 -0400

Builds

• i386

Package files

• python-swift_1.13.1-0ubuntu1.5_all.deb (227.1 KiB)
• swift-account_1.13.1-0ubuntu1.5_all.deb (16.6 KiB)
• swift-container_1.13.1-0ubuntu1.5_all.deb (15.4 KiB)
• swift-doc_1.13.1-0ubuntu1.5_all.deb (268.0 KiB)
• swift-object-expirer_1.13.1-0ubuntu1.5_all.deb (6.9 KiB)
• swift-object_1.13.1-0ubuntu1.5_all.deb (17.8 KiB)
• swift-proxy_1.13.1-0ubuntu1.5_all.deb (18.3 KiB)
• swift_1.13.1-0ubuntu1.5.debian.tar.gz (39.4 KiB)
• swift_1.13.1-0ubuntu1.5.dsc (2.7 KiB)
• swift_1.13.1-0ubuntu1.5_all.deb (24.6 KiB)
• swift_1.13.1.orig.tar.gz (783.5 KiB)