CVE-2017-8761
Fixed in a distro release EPSS <1%
In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.
Products: openstack swift
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | swift | 2.15.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | swift | 2.17.0-2 |
| Debian 13 | swift | 2.17.0-2 |
| Debian 14 | swift | 2.17.0-2 |
| Ubuntu 16.04 LTS | swift | no fix |
| Ubuntu 18.04 LTS | swift | no fix |
| Ubuntu 20.04 LTS | swift | no fix |