CVE-2016-9590

Name	CVE-2016-9590
Description	puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage (swift). During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	851293

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
puppet-module-swift (PTS)	bullseye	17.4.1-3	fixed
	bookworm	21.0.0-2	fixed
	trixie	24.0.0-3	fixed
	sid	25.0.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
puppet-module-swift	source	(unstable)	9.4.4-1			851293