[ubuntu-cloud-archive/icehouse-proposed] swift (Accepted)

[James Page]

 swift (1.13.1-0ubuntu1.2~cloud0) precise-icehouse; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 swift (1.13.1-0ubuntu1.2) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: metadata constraint bypass via multiple requests
     - debian/patches/CVE-2014-7960.patch: add metadata checks to
       swift/account/server.py, swift/common/constraints.py,
       swift/common/db.py, swift/container/server.py, added tests to
       test/functional/test_account.py, test/functional/test_container.py,
       test/unit/common/test_db.py.
     - CVE-2014-7960
   * SECURITY UPDATE: object deletion via x-versions-location container
     - debian/patches/CVE-2015-1856.patch: prevent unauthorized delete in
       swift/proxy/controllers/obj.py, added tests to
       test/functional/tests.py, test/unit/proxy/test_server.py.
     - CVE-2015-1856

Date: Thu, 06 Aug 2015 04:16:42 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: James Page <james.page at ubuntu.com>