Synopsis

Moderate: openstack-swift security update

Type/Severity

Security Advisory: Moderate

Topic

Updated openstack-swift packages that fix one security issue are now
available for Red Hat Enterprise Linux OpenStack Platform 5.0, 6.0, and
7.0.

Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

OpenStack Object Storage (swift) provides object storage in virtual
containers, which allows users to store and retrieve files (arbitrary
data). The service's distributed architecture supports horizontal scaling;
redundancy as failure-proofing is provided through software-based data
replication. Because Object Storage supports asynchronous eventual
consistency replication, it is well suited to deployment in multiple
data centers.

A flaw was found in the OpenStack Object storage service (swift)
tempurls. An attacker in possession of a tempurl key with PUT permissions
may be able to gain read access to other objects in the same project.
(CVE-2015-5223)

Red Hat would like to thank the OpenStack project for reporting this
issue. Upstream acknowledges Richard Hawkins of Rackspace, and the
OpenStack Swift core reviewers as the original reporters.

All users of openstack-swift are advised to upgrade to these updated
packages, which correct this issue. After installing this update, the
OpenStack Object Storage services will be restarted automatically.

Solution

Before applying this update, ensure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenStack 7 x86_64
• Red Hat OpenStack 6.0 x86_64
• Red Hat OpenStack 5.0 for RHEL 7 x86_64
• Red Hat OpenStack 5.0 for RHEL 6 x86_64

Fixes

• BZ - 1255622 - CVE-2015-5223 openstack-swift: Information leak via Swift tempurls

CVEs

• CVE-2015-5223

References

• http://www.redhat.com/security/updates/classification/#normal

Red Hat OpenStack 7

SRPM
openstack-swift-2.3.0-2.el7ost.src.rpm	SHA-256: 71367d979aa9d5e73f2574f37e802aa2973f486aec3fb18d124d361502600ba7
x86_64
openstack-swift-2.3.0-2.el7ost.noarch.rpm	SHA-256: a91aa2b18fc22654c80f67e2e61aeb96b0805288889ed4cdb769e45dd8b278cb
openstack-swift-account-2.3.0-2.el7ost.noarch.rpm	SHA-256: f3d60382f28a6d55a6f973f2245c76be8b589ce3f98337aa274d5b39dad31419
openstack-swift-container-2.3.0-2.el7ost.noarch.rpm	SHA-256: 8ede2b9e18bed77e2b923f01a330d1ff4efb9f0dcbc1887aa327f4b06dcca7ea
openstack-swift-doc-2.3.0-2.el7ost.noarch.rpm	SHA-256: e2c1e1937b4ca9641fef9a6f7d7776631250635bc88999275cc162e1b3c1333b
openstack-swift-object-2.3.0-2.el7ost.noarch.rpm	SHA-256: 97323aa83a9e55414ab0af4b0059fe8eb55440908d86acb962b1e6cbc8519aee
openstack-swift-proxy-2.3.0-2.el7ost.noarch.rpm	SHA-256: f110d43ec74236e70b25483b53d2745c5b77be6e07cc1f213dda3372f10eb655

Red Hat OpenStack 6.0

SRPM
openstack-swift-2.2.0-5.el7ost.src.rpm	SHA-256: b8ab7b53b7b1b8e3b2ee39ad8d128fff208a4dced34898c17f812b18f484faa8
x86_64
openstack-swift-2.2.0-5.el7ost.noarch.rpm	SHA-256: 9e886dacee9506a9b952f32a2571176f681dbc5e76e649b2c48daeff16a83680
openstack-swift-account-2.2.0-5.el7ost.noarch.rpm	SHA-256: 0ac6b70d75711c3f6ae0c41a6291df15f734e50ab5b0757e63a8c93ba09f8c20
openstack-swift-container-2.2.0-5.el7ost.noarch.rpm	SHA-256: db9f285cded4c96b2f208ac98beae74806d5e3af5c6b682cd42636a2aef57e67
openstack-swift-doc-2.2.0-5.el7ost.noarch.rpm	SHA-256: 358e5369223090dbd8437a7013b344aaa31aab6688f677bd79ebe8599726ce6c
openstack-swift-object-2.2.0-5.el7ost.noarch.rpm	SHA-256: 3841270c2d3290bb2ac280ddd2cc550284114abad8fefc8eae83f670b10796be
openstack-swift-proxy-2.2.0-5.el7ost.noarch.rpm	SHA-256: 1dcbc2ca73246923f5ac8dada2209d7d753b3d86cec61ba07ee50c9d17d41dad

Red Hat OpenStack 5.0 for RHEL 7

SRPM
openstack-swift-1.13.1-7.el7ost.src.rpm	SHA-256: 70dd1341d116317ab46921a11658043a8d9d4d08c11307b61335c7ab49b6b0ce
x86_64
openstack-swift-1.13.1-7.el7ost.noarch.rpm	SHA-256: 8bfeace9feba3b343bb34000dc38d81d9113c9019a7b55aca25498c616ba5f69
openstack-swift-account-1.13.1-7.el7ost.noarch.rpm	SHA-256: 8f18e820df4825ab619b0befd1e04846813c51b504c8f1c576d1e2a5ac396b34
openstack-swift-container-1.13.1-7.el7ost.noarch.rpm	SHA-256: b329ec276cac5cff56ef02af8d96cbd30abccbadae68ad9bbbc20ccdfc859412
openstack-swift-doc-1.13.1-7.el7ost.noarch.rpm	SHA-256: 0b1db9859ff5bc8686d42b265aa776eb0c469559f528f72ba774b95f92672fbc
openstack-swift-object-1.13.1-7.el7ost.noarch.rpm	SHA-256: 1cab025778c32e5f44d6f4295325772a27d37c0f045b1c5ceb3b932066085ebd
openstack-swift-proxy-1.13.1-7.el7ost.noarch.rpm	SHA-256: 0746959cebdde4e7ca508c65fccbd4d8171a90ca6454302867228458e1561e74

Red Hat OpenStack 5.0 for RHEL 6

SRPM
openstack-swift-1.13.1-7.el6ost.src.rpm	SHA-256: 12a2e61da6d86607ca7b8bd66d570c01607412a5ff54536f726fa04f077286b0
x86_64
openstack-swift-1.13.1-7.el6ost.noarch.rpm	SHA-256: 19da07c675f77407060895731d653ed262eb427c8c0e8ec2cdb21edf42b46feb
openstack-swift-account-1.13.1-7.el6ost.noarch.rpm	SHA-256: b7d18206eec792e4ed6e0c6d5171a0431d291b3781f188c891fc0a7b9746e48c
openstack-swift-container-1.13.1-7.el6ost.noarch.rpm	SHA-256: fc22a1fcb0e14dbecffac3f184a437ab9bf68175a849d3dfa805515304f752e5
openstack-swift-doc-1.13.1-7.el6ost.noarch.rpm	SHA-256: 7cd87fb27833f59c3b24e510b3d8e3549fb193c2da3a724ad28158ea5262a469
openstack-swift-object-1.13.1-7.el6ost.noarch.rpm	SHA-256: 9bf9296c26194dda87e9e0a545daa37afd63996d650f78cf661c231bda43933f
openstack-swift-proxy-1.13.1-7.el6ost.noarch.rpm	SHA-256: 27d2dff3a29b182b68a8db39406067629930b6933fbc73060566c21cd05fc453