CVE-2014-7960
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
Exploit likelihood
What each source reports
NVD Score used
4.0
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
CVE-2014-7960- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:P/A:N - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
CVE-2014-7960- Updated
- 2026-11-02
EUVDEUVD-2022-3908 No score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
EUVD-2022-3908- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g6x3-55qv-x6p2 No score
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
GHSA-g6x3-55qv-x6p2- Updated
- 2026-11-02
OSV No score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
CVE-2014-7960- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-7960 No score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
DEBIAN-CVE-2014-7960- Updated
- 2026-11-02
Show 5 moreShow less
OSVGHSA-g6x3-55qv-x6p2 No score
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
GHSA-g6x3-55qv-x6p2- Updated
- 2026-11-02
OSVPYSEC-2026-933 No score
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
PYSEC-2026-933- Updated
- 2026-11-02
OSVSUSE-SU-2015:1846-1 No score
Security update for openstack-swift
openstack-swift was updated to fix three security issues.
These security issues were fixed:
- CVE-2015-1856: OpenStack Object Storage (Swift), when allow_version is configured, allowed remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container (bsc#927793).
- CVE-2014-7960: OpenStack Object Storage (Swift) allowed remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined (bsc#900253).
- CVE-2015-5223: Information leak via Swift tempurls (bsc#942641).
- Record
SUSE-SU-2015:1846-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-7960 No score
OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.
- Record
UBUNTU-CVE-2014-7960- Updated
- 2026-11-02
OSVUSN-2704-1 No score
swift vulnerabilities
Rajaneesh Singh discovered Swift does not properly enforce metadata limits. An attacker could abuse this issue to store more metadata than allowed by policy. (CVE-2014-7960)
Clay Gerrard discovered Swift allowed users to delete the latest version of object regardless of object permissions when allow_version is configured. An attacker could use this issue to delete objects. (CVE-2015-1856)
- Record
USN-2704-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
swiftPyPI |
before 2.2.0 | 2.2.0 |
swiftDebian:12 |
before 2.2.0-1 | 2.2.0-1 |
swiftDebian:13 |
before 2.2.0-1 | 2.2.0-1 |
swiftDebian:14 |
before 2.2.0-1 | 2.2.0-1 |
swiftPyPI |
before 2.2.0, plus listed versions 1.0.2 |
2.2.0 |
openstack-swiftRed Hat:openstack:5::el7 |
before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swift-accountRed Hat:openstack:5::el7 |
before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swift-containerRed Hat:openstack:5::el7 |
before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swift-docRed Hat:openstack:5::el7 |
before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swift-objectRed Hat:openstack:5::el7 |
before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
Show 185 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-swift-proxyRed Hat:openstack:5::el7 |
before 0:1.13.1-4.el7ost | 0:1.13.1-4.el7ost |
openstack-swiftRed Hat:openstack:5::el6 |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-accountRed Hat:openstack:5::el6 |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-containerRed Hat:openstack:5::el6 |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-docRed Hat:openstack:5::el6 |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-objectRed Hat:openstack:5::el6 |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-proxyRed Hat:openstack:5::el6 |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
glusterfsRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-apiRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-api-develRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-cliRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-client-xlatorsRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-debuginfoRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-develRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-fuseRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-libsRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
glusterfs-rdmaRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
python-glusterRed Hat:storage:2:client:el5 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el5 | 0:3.7.1-11.el5 |
nfs-ganeshaRed Hat:storage:3.1:nfs:el6 From an advisory covering 4 CVEs |
before 0:2.2.0-5.el6rhs | 0:2.2.0-5.el6rhs |
nfs-ganesha-debuginfoRed Hat:storage:3.1:nfs:el6 From an advisory covering 4 CVEs |
before 0:2.2.0-5.el6rhs | 0:2.2.0-5.el6rhs |
nfs-ganesha-glusterRed Hat:storage:3.1:nfs:el6 From an advisory covering 4 CVEs |
before 0:2.2.0-5.el6rhs | 0:2.2.0-5.el6rhs |
nfs-ganesha-nullfsRed Hat:storage:3.1:nfs:el6 From an advisory covering 4 CVEs |
before 0:2.2.0-5.el6rhs | 0:2.2.0-5.el6rhs |
check-mkRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:1.2.6p1-3.el6rhs | 0:1.2.6p1-3.el6rhs |
check-mk-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:1.2.6p1-3.el6rhs | 0:1.2.6p1-3.el6rhs |
check-mk-livestatusRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:1.2.6p1-3.el6rhs | 0:1.2.6p1-3.el6rhs |
gluster-nagios-commonRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:0.2.0-1.el6rhs | 0:0.2.0-1.el6rhs |
nagios-pluginsRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-dummyRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-nrpeRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
nagios-plugins-pingRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-server-addonsRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:0.2.1-4.el6rhs | 0:0.2.1-4.el6rhs |
nrpeRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
nrpe-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
pnp4nagiosRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:0.6.22-2.1.el6rhs | 0:0.6.22-2.1.el6rhs |
pnp4nagios-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:0.6.22-2.1.el6rhs | 0:0.6.22-2.1.el6rhs |
pynagRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:0.9.1-1.el6rhs | 0:0.9.1-1.el6rhs |
pynag-examplesRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:0.9.1-1.el6rhs | 0:0.9.1-1.el6rhs |
python-cpopenRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:1.3-4.el6_5 | 0:1.3-4.el6_5 |
python-cpopen-debuginfoRed Hat:storage:3.1:nagios:el6 From an advisory covering 4 CVEs |
before 0:1.3-4.el6_5 | 0:1.3-4.el6_5 |
libtallocRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs |
before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
libtalloc-debuginfoRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs |
before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
libtalloc-develRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs |
before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
pytallocRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs |
before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
pytalloc-develRed Hat:storage:3.1:samba:el6 From an advisory covering 4 CVEs |
before 0:2.1.1-4.el6rhs | 0:2.1.1-4.el6rhs |
augeasRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.0.0-10.el6 | 0:1.0.0-10.el6 |
augeas-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.0.0-10.el6 | 0:1.0.0-10.el6 |
augeas-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.0.0-10.el6 | 0:1.0.0-10.el6 |
augeas-libsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.0.0-10.el6 | 0:1.0.0-10.el6 |
ccsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.16.2-81.el6 | 0:0.16.2-81.el6 |
clufterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-cliRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-lib-ccsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-lib-generalRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clufter-lib-pcsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
clusterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
cluster-cimRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
cluster-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
cluster-snmpRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
clusterlibRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
clusterlib-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
clustermonRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
clustermon-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
cmanRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
corosyncRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.4.7-2.el6 | 0:1.4.7-2.el6 |
corosync-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.4.7-2.el6 | 0:1.4.7-2.el6 |
corosynclibRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.4.7-2.el6 | 0:1.4.7-2.el6 |
corosynclib-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.4.7-2.el6 | 0:1.4.7-2.el6 |
ctdb2.5Red Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:2.5.5-7.el6rhs | 0:2.5.5-7.el6rhs |
ctdb2.5-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:2.5.5-7.el6rhs | 0:2.5.5-7.el6rhs |
fence-virtRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virt-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtdRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtd-checkpointRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtd-libvirtRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtd-multicastRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
fence-virtd-serialRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.3-19.el6 | 0:0.2.3-19.el6 |
gfs2-utilsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.0.12.1-73.el6 | 0:3.0.12.1-73.el6 |
gluster-nagios-addonsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.4-4.el6rhs | 0:0.2.4-4.el6rhs |
gluster-nagios-addons-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.4-4.el6rhs | 0:0.2.4-4.el6rhs |
gluster-nagios-commonRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.2.0-1.el6rhs | 0:0.2.0-1.el6rhs |
glusterfsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-apiRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-api-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-cliRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-client-xlatorsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-fuseRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-ganeshaRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-geo-replicationRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-libsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-rdmaRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
glusterfs-serverRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
gstatusRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.64-3.1.el6rhs | 0:0.64-3.1.el6rhs |
gstatus-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.64-3.1.el6rhs | 0:0.64-3.1.el6rhs |
libqbRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.17.1-1.el6 | 0:0.17.1-1.el6 |
libqb-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.17.1-1.el6 | 0:0.17.1-1.el6 |
libqb-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.17.1-1.el6 | 0:0.17.1-1.el6 |
libvirt-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.10.2-54.el6 | 0:0.10.2-54.el6 |
libvirt-lock-sanlockRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.10.2-54.el6 | 0:0.10.2-54.el6 |
modclusterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.16.2-31.el6 | 0:0.16.2-31.el6 |
nagios-pluginsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-ide_smartRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nagios-plugins-procsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.4.16-12.el6rhs | 0:1.4.16-12.el6rhs |
nrpeRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
nrpe-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:2.15-4.1.el6rhs | 0:2.15-4.1.el6rhs |
openaisRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.1-7.el6 | 0:1.1.1-7.el6 |
openais-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.1-7.el6 | 0:1.1.1-7.el6 |
openaislibRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.1-7.el6 | 0:1.1.1-7.el6 |
openaislib-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.1-7.el6 | 0:1.1.1-7.el6 |
openstack-swiftRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-accountRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-containerRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-docRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-objectRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
openstack-swift-proxyRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.13.1-4.el6ost | 0:1.13.1-4.el6ost |
pacemakerRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-cliRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-cluster-libsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-ctsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-docRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-libsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-libs-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pacemaker-remoteRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.1.12-8.el6 | 0:1.1.12-8.el6 |
pcsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.9.139-9.el6 | 0:0.9.139-9.el6 |
pcs-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.9.139-9.el6 | 0:0.9.139-9.el6 |
python-blivetRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 1:1.0.0.2-1.el6rhs | 1:1.0.0.2-1.el6rhs |
python-clufterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.11.2-1.el6 | 0:0.11.2-1.el6 |
python-cpopenRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.3-4.el6_5 | 0:1.3-4.el6_5 |
python-cpopen-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:1.3-4.el6_5 | 0:1.3-4.el6_5 |
python-eventletRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.14.0-1.el6 | 0:0.14.0-1.el6 |
python-eventlet-docRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.14.0-1.el6 | 0:0.14.0-1.el6 |
python-glusterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6rhs | 0:3.7.1-11.el6rhs |
python-greenletRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.4.2-1.el6 | 0:0.4.2-1.el6 |
python-greenlet-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.4.2-1.el6 | 0:0.4.2-1.el6 |
python-greenlet-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.4.2-1.el6 | 0:0.4.2-1.el6 |
python-keystoneclientRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 1:0.9.0-5.el6ost | 1:0.9.0-5.el6ost |
python-keystoneclient-docRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 1:0.9.0-5.el6ost | 1:0.9.0-5.el6ost |
python-prettytableRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.7.2-1.el6 | 0:0.7.2-1.el6 |
python-pyudevRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.15-2.el6rhs | 0:0.15-2.el6rhs |
redhat-storage-logosRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:60.0.20-1.el6rhs | 0:60.0.20-1.el6rhs |
redhat-storage-serverRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.1.0.3-1.el6rhs | 0:3.1.0.3-1.el6rhs |
resource-agentsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.9.5-24.el6 | 0:3.9.5-24.el6 |
resource-agents-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.9.5-24.el6 | 0:3.9.5-24.el6 |
resource-agents-sapRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:3.9.5-24.el6 | 0:3.9.5-24.el6 |
ricciRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.16.2-81.el6 | 0:0.16.2-81.el6 |
ricci-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.16.2-81.el6 | 0:0.16.2-81.el6 |
userspace-rcuRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.7.9-2.el6rhs | 0:0.7.9-2.el6rhs |
userspace-rcu-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.7.9-2.el6rhs | 0:0.7.9-2.el6rhs |
userspace-rcu-develRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:0.7.9-2.el6rhs | 0:0.7.9-2.el6rhs |
vdsmRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-cliRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-debug-pluginRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-debuginfoRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-glusterRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-hook-ethtool-optionsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-hook-faqemuRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-hook-openstacknetRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-hook-qemucmdlineRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-jsonrpcRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-pythonRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-python-zombiereaperRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-regRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-testsRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-xmlrpcRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
vdsm-yajsonrpcRed Hat:storage:3.1:server:el6 From an advisory covering 4 CVEs |
before 0:4.16.20-1.2.el6rhs | 0:4.16.20-1.2.el6rhs |
glusterfsRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-apiRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-api-develRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-cliRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-client-xlatorsRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-debuginfoRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-develRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-fuseRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-libsRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
glusterfs-rdmaRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
python-glusterRed Hat:storage:3:client:el6 From an advisory covering 4 CVEs |
before 0:3.7.1-11.el6 | 0:3.7.1-11.el6 |
openstack-swiftSUSE:OpenStack Cloud 5 From an advisory covering 3 CVEs |
before 2.1.0-11.1 | 2.1.0-11.1 |
openstack-swift-docSUSE:OpenStack Cloud 5 From an advisory covering 3 CVEs |
before 2.1.0-11.1 | 2.1.0-11.1 |
swiftUbuntu:14.04:LTS |
before 1.13.1-0ubuntu1.2, plus listed versions 1.10.0~rc1-0ubuntu11.10.0-0ubuntu11.11.0-0ubuntu21.12.0-0ubuntu11.13.0-0ubuntu1 Show 4 moreShow less1.13.1~rc1-0ubuntu21.13.1~rc2-0ubuntu11.13.1-0ubuntu11.13.1-0ubuntu1.1 |
1.13.1-0ubuntu1.2 |
swiftUbuntu:14.04:LTS From an advisory covering 2 CVEs |
before 1.13.1-0ubuntu1.2, plus listed versions 1.10.0~rc1-0ubuntu11.10.0-0ubuntu11.11.0-0ubuntu21.12.0-0ubuntu11.13.0-0ubuntu1 Show 4 moreShow less1.13.1~rc1-0ubuntu21.13.1~rc2-0ubuntu11.13.1-0ubuntu11.13.1-0ubuntu1.1 |
1.13.1-0ubuntu1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-7960 is a medium vulnerability (CVSS 4.0) in Openstack Swift, published October 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.13%, the 87th percentile. Fixed in swift 2.2.0.
References
lists.opensuse.org/opensuse-security-announce/2015-10/msg00025.html
openwall.com/lists/oss-security/2014/10/08/7
bugs.launchpad.net/swift/+bug/1365350
rhn.redhat.com/errata/RHSA-2015-1495.html
rhn.redhat.com/errata/RHSA-2015-0835.html
exchange.xforce.ibmcloud.com/vulnerabilities/96901
Show 194 moreShow less
openwall.com/lists/oss-security/2014/10/07/39
oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
ubuntu.com/usn/USN-2704-1
securityfocus.com/bid/70279
rhn.redhat.com/errata/RHSA-2015-0836.html
nvd.nist.gov/vuln/detail/CVE-2014-7960
github.com/openstack/swift/commit/06800cbe446ce4c937a57b69517b55c3bba9b6e1
github.com/openstack/swift/commit/2c4622a28ea04e1c6b2382189b0a1f6cccdc9c0f
github.com/openstack/swift/commit/5b2c27a5874c2b5b0a333e4955b03544f6a8119f
github.com/advisories/GHSA-g6x3-55qv-x6p2
security-tracker.debian.org/tracker/CVE-2014-7960
github.com/openstack/swift
pypi.org/project/swift
access.redhat.com/errata/RHSA-2015:0835
access.redhat.com/security/updates/classification
access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Release_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=1150461
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0835.json
access.redhat.com/security/cve/CVE-2014-7960
cve.org/CVERecord?id=CVE-2014-7960
access.redhat.com/errata/RHSA-2015:0836
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0836.json
access.redhat.com/errata/RHSA-2015:1495
access.redhat.com/documentation/en-US/Red_Hat_Storage/3.1/html/Technical_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=826836
bugzilla.redhat.com/show_bug.cgi?id=871727
bugzilla.redhat.com/show_bug.cgi?id=874745
bugzilla.redhat.com/show_bug.cgi?id=980043
bugzilla.redhat.com/show_bug.cgi?id=987980
bugzilla.redhat.com/show_bug.cgi?id=990029
bugzilla.redhat.com/show_bug.cgi?id=1002991
bugzilla.redhat.com/show_bug.cgi?id=1006840
bugzilla.redhat.com/show_bug.cgi?id=1008826
bugzilla.redhat.com/show_bug.cgi?id=1009351
bugzilla.redhat.com/show_bug.cgi?id=1010327
bugzilla.redhat.com/show_bug.cgi?id=1021820
bugzilla.redhat.com/show_bug.cgi?id=1023416
bugzilla.redhat.com/show_bug.cgi?id=1026831
bugzilla.redhat.com/show_bug.cgi?id=1027142
bugzilla.redhat.com/show_bug.cgi?id=1027693
bugzilla.redhat.com/show_bug.cgi?id=1027710
bugzilla.redhat.com/show_bug.cgi?id=1028965
bugzilla.redhat.com/show_bug.cgi?id=1029104
bugzilla.redhat.com/show_bug.cgi?id=1031515
bugzilla.redhat.com/show_bug.cgi?id=1032445
bugzilla.redhat.com/show_bug.cgi?id=1039008
bugzilla.redhat.com/show_bug.cgi?id=1039674
bugzilla.redhat.com/show_bug.cgi?id=1044344
bugzilla.redhat.com/show_bug.cgi?id=1047481
bugzilla.redhat.com/show_bug.cgi?id=1048122
bugzilla.redhat.com/show_bug.cgi?id=1054154
bugzilla.redhat.com/show_bug.cgi?id=1059255
bugzilla.redhat.com/show_bug.cgi?id=1062401
bugzilla.redhat.com/show_bug.cgi?id=1063215
bugzilla.redhat.com/show_bug.cgi?id=1082659
bugzilla.redhat.com/show_bug.cgi?id=1083024
bugzilla.redhat.com/show_bug.cgi?id=1085202
bugzilla.redhat.com/show_bug.cgi?id=1093838
bugzilla.redhat.com/show_bug.cgi?id=1098093
bugzilla.redhat.com/show_bug.cgi?id=1098200
bugzilla.redhat.com/show_bug.cgi?id=1101270
bugzilla.redhat.com/show_bug.cgi?id=1101697
bugzilla.redhat.com/show_bug.cgi?id=1102047
bugzilla.redhat.com/show_bug.cgi?id=1103971
bugzilla.redhat.com/show_bug.cgi?id=1104478
bugzilla.redhat.com/show_bug.cgi?id=1109111
bugzilla.redhat.com/show_bug.cgi?id=1109689
bugzilla.redhat.com/show_bug.cgi?id=1110715
bugzilla.redhat.com/show_bug.cgi?id=1113424
bugzilla.redhat.com/show_bug.cgi?id=1114015
bugzilla.redhat.com/show_bug.cgi?id=1114976
bugzilla.redhat.com/show_bug.cgi?id=1116084
bugzilla.redhat.com/show_bug.cgi?id=1117172
bugzilla.redhat.com/show_bug.cgi?id=1117270
bugzilla.redhat.com/show_bug.cgi?id=1120907
bugzilla.redhat.com/show_bug.cgi?id=1121560
bugzilla.redhat.com/show_bug.cgi?id=1122064
bugzilla.redhat.com/show_bug.cgi?id=1127401
bugzilla.redhat.com/show_bug.cgi?id=1130998
bugzilla.redhat.com/show_bug.cgi?id=1131044
bugzilla.redhat.com/show_bug.cgi?id=1131418
bugzilla.redhat.com/show_bug.cgi?id=1131968
bugzilla.redhat.com/show_bug.cgi?id=1132026
bugzilla.redhat.com/show_bug.cgi?id=1132337
bugzilla.redhat.com/show_bug.cgi?id=1134690
bugzilla.redhat.com/show_bug.cgi?id=1139106
bugzilla.redhat.com/show_bug.cgi?id=1140183
bugzilla.redhat.com/show_bug.cgi?id=1140506
bugzilla.redhat.com/show_bug.cgi?id=1141433
bugzilla.redhat.com/show_bug.cgi?id=1144088
bugzilla.redhat.com/show_bug.cgi?id=1147627
bugzilla.redhat.com/show_bug.cgi?id=1150899
bugzilla.redhat.com/show_bug.cgi?id=1156637
bugzilla.redhat.com/show_bug.cgi?id=1160790
bugzilla.redhat.com/show_bug.cgi?id=1165663
bugzilla.redhat.com/show_bug.cgi?id=1171662
bugzilla.redhat.com/show_bug.cgi?id=1176835
bugzilla.redhat.com/show_bug.cgi?id=1177911
bugzilla.redhat.com/show_bug.cgi?id=1178130
bugzilla.redhat.com/show_bug.cgi?id=1179701
bugzilla.redhat.com/show_bug.cgi?id=1181108
bugzilla.redhat.com/show_bug.cgi?id=1183988
bugzilla.redhat.com/show_bug.cgi?id=1186328
bugzilla.redhat.com/show_bug.cgi?id=1195659
bugzilla.redhat.com/show_bug.cgi?id=1198021
bugzilla.redhat.com/show_bug.cgi?id=1201712
bugzilla.redhat.com/show_bug.cgi?id=1201732
bugzilla.redhat.com/show_bug.cgi?id=1202237
bugzilla.redhat.com/show_bug.cgi?id=1202388
bugzilla.redhat.com/show_bug.cgi?id=1203901
bugzilla.redhat.com/show_bug.cgi?id=1204044
bugzilla.redhat.com/show_bug.cgi?id=1208420
bugzilla.redhat.com/show_bug.cgi?id=1209132
bugzilla.redhat.com/show_bug.cgi?id=1211839
bugzilla.redhat.com/show_bug.cgi?id=1212576
bugzilla.redhat.com/show_bug.cgi?id=1212701
bugzilla.redhat.com/show_bug.cgi?id=1213245
bugzilla.redhat.com/show_bug.cgi?id=1213325
bugzilla.redhat.com/show_bug.cgi?id=1214211
bugzilla.redhat.com/show_bug.cgi?id=1214253
bugzilla.redhat.com/show_bug.cgi?id=1214258
bugzilla.redhat.com/show_bug.cgi?id=1214616
bugzilla.redhat.com/show_bug.cgi?id=1215430
bugzilla.redhat.com/show_bug.cgi?id=1215635
bugzilla.redhat.com/show_bug.cgi?id=1215637
bugzilla.redhat.com/show_bug.cgi?id=1215640
bugzilla.redhat.com/show_bug.cgi?id=1215885
bugzilla.redhat.com/show_bug.cgi?id=1216941
bugzilla.redhat.com/show_bug.cgi?id=1217852
bugzilla.redhat.com/show_bug.cgi?id=1218902
bugzilla.redhat.com/show_bug.cgi?id=1219793
bugzilla.redhat.com/show_bug.cgi?id=1220999
bugzilla.redhat.com/show_bug.cgi?id=1221344
bugzilla.redhat.com/show_bug.cgi?id=1221585
bugzilla.redhat.com/show_bug.cgi?id=1221612
bugzilla.redhat.com/show_bug.cgi?id=1221743
bugzilla.redhat.com/show_bug.cgi?id=1222442
bugzilla.redhat.com/show_bug.cgi?id=1222776
bugzilla.redhat.com/show_bug.cgi?id=1222785
bugzilla.redhat.com/show_bug.cgi?id=1222856
bugzilla.redhat.com/show_bug.cgi?id=1223201
bugzilla.redhat.com/show_bug.cgi?id=1223205
bugzilla.redhat.com/show_bug.cgi?id=1223206
bugzilla.redhat.com/show_bug.cgi?id=1223209
bugzilla.redhat.com/show_bug.cgi?id=1223225
bugzilla.redhat.com/show_bug.cgi?id=1223238
bugzilla.redhat.com/show_bug.cgi?id=1223299
bugzilla.redhat.com/show_bug.cgi?id=1223677
bugzilla.redhat.com/show_bug.cgi?id=1223695
bugzilla.redhat.com/show_bug.cgi?id=1223715
bugzilla.redhat.com/show_bug.cgi?id=1223738
bugzilla.redhat.com/show_bug.cgi?id=1223906
bugzilla.redhat.com/show_bug.cgi?id=1224033
bugzilla.redhat.com/show_bug.cgi?id=1224043
bugzilla.redhat.com/show_bug.cgi?id=1224046
bugzilla.redhat.com/show_bug.cgi?id=1224065
bugzilla.redhat.com/show_bug.cgi?id=1224068
bugzilla.redhat.com/show_bug.cgi?id=1224076
bugzilla.redhat.com/show_bug.cgi?id=1224077
bugzilla.redhat.com/show_bug.cgi?id=1224081
bugzilla.redhat.com/show_bug.cgi?id=1224086
bugzilla.redhat.com/show_bug.cgi?id=1224109
bugzilla.redhat.com/show_bug.cgi?id=1224126
bugzilla.redhat.com/show_bug.cgi?id=1224159
bugzilla.redhat.com/show_bug.cgi?id=1224164
bugzilla.redhat.com/show_bug.cgi?id=1224165
bugzilla.redhat.com/show_bug.cgi?id=1224175
bugzilla.redhat.com/show_bug.cgi?id=1224183
bugzilla.redhat.com/show_bug.cgi?id=1224215
bugzilla.redhat.com/show_bug.cgi?id=1224218
bugzilla.redhat.com/show_bug.cgi?id=1224229
bugzilla.redhat.com/show_bug.cgi?id=1224232
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1495.json
access.redhat.com/security/cve/CVE-2014-5338
cve.org/CVERecord?id=CVE-2014-5338
nvd.nist.gov/vuln/detail/CVE-2014-5338
access.redhat.com/security/cve/CVE-2014-5339
cve.org/CVERecord?id=CVE-2014-5339
nvd.nist.gov/vuln/detail/CVE-2014-5339
access.redhat.com/security/cve/CVE-2014-5340
cve.org/CVERecord?id=CVE-2014-5340
nvd.nist.gov/vuln/detail/CVE-2014-5340
suse.com/support/update/announcement/2015/suse-su-20151846-1
bugzilla.suse.com/900253
bugzilla.suse.com/927793
bugzilla.suse.com/942641
suse.com/security/cve/CVE-2014-7960
suse.com/security/cve/CVE-2015-1856
suse.com/security/cve/CVE-2015-5223
ubuntu.com/security/CVE-2014-7960
marc.info?l=oss-security&m=141275839830221&w=2
lists.openstack.org/pipermail/openstack-announce/2014-October/000291.html
ubuntu.com/security/notices/USN-2704-1
ubuntu.com/security/CVE-2015-1856
Left out here: 196 references. The JSON record has them.