tocsin

Debian/swift: unknown

In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests. A TempURL signature only covers the method, expiry, and path, and thus the list of disa

Action: Upgrade swift to 2.30.1-0+deb12u3 or later.

Affected

introducedfixedlast affected
02.30.1-0+deb12u3-

Fixed versions

2.30.1-0+deb12u3

Sources

published · modified · JSON