Skip to content
OpenAdvisories
High USN-8821-1 1 CVE

swift vulnerability

Published Sep 24, 2026 · Updated Sep 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that OpenStack Swift incorrectly handled truncated
aws-chunked PUT request bodies in its s3api middleware. An authenticated
attacker could possibly use this issue to cause OpenStack Swift to use
excessive resources, leading to a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 26.04 LTS 26.04:LTS swift 2.37.1-0ubuntu2.1

Vulnerabilities 1

  • High 7.1
    CVE-2026-49017

    OpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body

    In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly appends an empty buffer and re-reads, causing the proxy-server worker handling …

    OpenStack Swift swift swift Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2026-49017