python-swift: code execution [LWN.net]

Package(s):

swift

CVE #(s):

CVE-2013-2161

Created:

June 20, 2013

Updated:

August 13, 2013

Description:

From the Ubuntu advisory:

Alex Gaynor discovered that Swift did not safely generate XML. An attacker could potentially craft an account name to generate arbitrary XML responses to trigger vulnerabilties in software parsing Swift's XML. (CVE-2013-2161)

Alerts:

Ubuntu	USN-1887-1	2013-06-19
Red Hat	RHSA-2013:0993-01	2013-06-27
openSUSE	openSUSE-SU-2013:1146-1	2013-07-05
Debian	DSA-2737-1	2013-08-12

(Log in to post comments)