“Swift Core security contacts” team

Subscribed bugs


1 → 18 of 18 results First • Previous • Next • Last
High
Confirmed
#1572719 Client may hold socket open after ChunkWriteTimeout
OpenStack Object Storage (swift) 26
High
In Progress
#1655781 Swift object/proxy server writing Auth Token to log file (swauth)
Swift Authentication 262
Wishlist
Confirmed
#1381541 Object GET on deleted account is successful
OpenStack Object Storage (swift) 8
Wishlist
Confirmed
#1674191 HTTPS connection and authentication are not supported between swift-proxy and swift-account-server/swift-container-server/swift-object-server.
OpenStack Object Storage (swift) 8
Undecided
New
#1005921 possible HTTP header injection
openstack-secaudit 26
Undecided
Fix Committed
#1183884 [OSSA 2013-016] Unescaped content embedded in XML (CVE-2013-2161)
OpenStack Object Storage (swift) folsom 268
Undecided
Fix Committed
#1183884 [OSSA 2013-016] Unescaped content embedded in XML (CVE-2013-2161)
OpenStack Object Storage (swift) grizzly 268
Undecided
Fix Committed
#1365350 [OSSA 2014-034] Metadata constraints defined in openstack documents doen't match implementation (CVE-2014-7960)
OpenStack Object Storage (swift) icehouse 258
Undecided
Fix Committed
#1449212 Container level temp URLs can unintentionally leak data.
OpenStack Object Storage (swift) kilo 262
Undecided
New
#1489749 staticweb middleware ignores acl and breaks clients
puppet-swift trunk 14
Undecided
New
#1489749 staticweb middleware ignores acl and breaks clients
puppet-swift juno 14
Undecided
New
#1489749 staticweb middleware ignores acl and breaks clients
puppet-swift kilo 14
Undecided
In Progress
#1639691 EC: Swift can return corrupted Data and be able to go data lost at isa_l_rs_vand policy with >=5 parities
PyECLib 12
Undecided
Confirmed
#1655703 Authentication using tempAuth writes token to log file
OpenStack Object Storage (swift) 10
Undecided
New
#1685798 Swift tempurl middleware reveals signatures in the logfiles (CVE-2017-8761)
Swift3 256
Undecided
New
#1765834 Need to verify content of v4-signed PUTs
Swift3 10
Undecided
Incomplete
#1980954 Resource leak with HTTPBadRequest in StaticLargeObject.get_slo_segments
OpenStack Security Advisory 258
Undecided
New
#1988310 Object expiration in Swift header 'X-Remove-Delete-At'
OpenStack Object Storage (swift) 8
1 → 18 of 18 results First • Previous • Next • Last