Ubuntu: 13.04 USN-2001-1 moderate: swift denial of service

ubuntu

October 23, 2013

Swift could cause the system to crash if it received specially crafted requests over the network.

Summary

Swift could cause the system to crash if it received specially crafted

requests over the network.

Software Description:

- swift: OpenStack distributed virtual object store

Details:

Peter Portante discovered that Swift did not properly handle requests with

old X-Timestamp values. An authenticated attacker could exploit this to

cause a denial of service via disk consumption.

Topics Covered

security advisory denial of service Ubuntu exploitation swift

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  python-swift                    1.8.0-0ubuntu1.3

Ubuntu 12.10:
  python-swift                    1.7.4-0ubuntu2.3

Ubuntu 12.04 LTS:
  python-swift                    1.4.8-0ubuntu2.3

In general, a standard system update will make all the necessary changes.