[Openstack-devel] Bug#730626: python-swiftclient: CVE-2013-6396

[Salvatore Bonaccorso]

Package: python-swiftclient
Severity: grave
Tags: security upstream patch

Hi Thomas,

(This is similar to #718282, CVE-2013-4111 for python-glanceclient.)

the following vulnerability was published for python-swiftclient.

CVE-2013-6396[0]:
does not properly verify the server SSL certificates

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6396
    http://security-tracker.debian.org/tracker/CVE-2013-6396
[1] https://bugs.launchpad.net/python-swiftclient/+bug/1199783

Regards,
Salvatore