Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
No package-associated file paths were observed for the displayed build metadata.
Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and thus the list of disa
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The "qdtext" pattern (?:[^"]|\\.)* allows an una
High(8.7)
Unbekannt
Die Paketzuordnung läuft. Beobachtet:
Details (2)
2.30.1-0+deb12u1 · all · bookworm
Betroffen · Behoben: 2.30.1-0+deb12u2
nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1 · all · bookworm
Betroffen · Behoben: 2.30.1-0+deb12u2
nvd · swift · debian · bookworm; nvd · swift · debian · 12
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT
High(8.2)
Unbekannt
Die Paketzuordnung läuft. Beobachtet:
Details (2)
2.30.1-0+deb12u1 · all · bookworm
Betroffen · Behoben: 2.30.1-0+deb12u3
nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1 · all · bookworm
Betroffen · Behoben: 2.30.1-0+deb12u3
nvd · swift · debian · bookworm; nvd · swift · debian · 12
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-Copy-From-Account) from S3 API requests when s3_acl=true. An
attacker can inject
Medium(6.5)
Unbekannt
Die Paketzuordnung läuft. Beobachtet:
Details (2)
2.30.1-0+deb12u1 · all · bookworm
Betroffen · Behoben: 2.30.1-0+deb12u3
nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1 · all · bookworm
Betroffen · Behoben: 2.30.1-0+deb12u3
nvd · swift · debian · bookworm; nvd · swift · debian · 12
In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device) from client requests before forwardin
Medium(6.4)
Unbekannt
Die Paketzuordnung läuft. Beobachtet:
Details (2)
2.30.1-0+deb12u1 · all · bookworm
Betroffen · Behoben: 2.30.1-0+deb12u2
nvd · swift · debian · bookworm; nvd · swift · debian · 12
2.30.1-0+deb12u1 · all · bookworm
Betroffen · Behoben: 2.30.1-0+deb12u2
nvd · swift · debian · bookworm; nvd · swift · debian · 12
In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly appends an empty buf
