CVE-Request: openstack pickle de-serialization

[Sebastian Krahmer <krahmer () suse de>]

Hi,

During openstack review we found that some parts of openstack
used pickle to de-serialize data. This could be used to execute
arbitrary code. Please check here:

https://bugs.launchpad.net/swift/+bug/1006414

Can someone please assign a CVE, for completeness?

thx,
Sebastian

-- 

~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ krahmer () suse de - SuSE Security Team

---
SUSE LINUX Products GmbH,
GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)
Maxfeldstraße 5
90409 Nürnberg
Germany