linux/meta-cloud-services.git/meta-openstack/recipes-devtools/python/python-swift/CVE-2014-0006-swift-1265665.patch, branch havana Mirror of git.yoctoproject.org/meta-cloud-services.git https://git.enea.com/cgit/linux/meta-cloud-services.git/atom?h=havana 2014-08-22T20:27:48+00:00 core: update core components to latest havana/stable releases 2014-08-22T20:27:48+00:00 Vu Tran vu.tran@windriver.com 2014-08-20T14:45:11+00:00 urn:sha1:0f225491c7e34a52b1e65b6af2482c9f16472cac The patch CVE-2014-0006-swift-1265665.patch is already in the latest Swift havana/stable release, so dropping it. Signed-off-by: Vu Tran <vu.tran@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com> CVE-2014-0006 Openstack Swift: TempURL timing attack 2014-05-08T18:30:03+00:00 Amy Fong amy.fong@windriver.com 2014-05-07T18:20:09+00:00 urn:sha1:fd1371e01ea808309b76a72cc9a161c72e148279 The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack. Signed-off-by: Amy Fong <amy.fong@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>