CVE-2013-6396

Name	CVE-2013-6396
Description	The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	730626

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
python-swiftclient (PTS)	buster	1:3.6.0-2	fixed
	bullseye	1:3.10.1-2	fixed
	bookworm	1:4.1.0-2	fixed
	sid, trixie	1:4.5.0-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
python-swiftclient	source	(unstable)	1:2.0.2-1			730626

https://bugs.launchpad.net/python-swiftclient/+bug/1199783