Home / mailings

PDF

[USN-8821-1] OpenStack Swift vulnerability

Posted on 24 September 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8821-1
September 24, 2026

swift vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS

Summary:

OpenStack Swift could be made to crash if it received specially crafted
network traffic from an authenticated user.

Software Description:
- swift: OpenStack distributed virtual object store

Details:

It was discovered that OpenStack Swift incorrectly handled truncated
aws-chunked PUT request bodies in its s3api middleware. An authenticated
attacker could possibly use this issue to cause OpenStack Swift to use
excessive resources, leading to a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
python3-swift 2.37.1-0ubuntu2.1
swift 2.37.1-0ubuntu2.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8821-1
CVE-2026-49017

Package Information:
https://launchpad.net/ubuntu/+source/swift/2.37.1-0ubuntu2.1

--===============2722041677597553367==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP