2 mentions in 7 days · 2 in 30 days · 2 total · first seen · last
Ubuntu warns an authenticated OpenStack Swift bug can cause a denial of service.
Ubuntu security notice USN-8821-1 says OpenStack Swift incorrectly handled truncated aws-chunked PUT request bodies in its s3api middleware. An authenticated attacker could make Swift consume excessive resources and cause a denial of service. The notice does not name a CVE or report exploitation in the wild.
OpenStack Swift tempurl bug CVE-2026-97149 can leak information across containers.
OpenStack published OSSA-2026-041 for CVE-2026-97149, a cross-container information disclosure in Swift's tempurl feature. The issue, reported by Oren Yomtov of ACT Security, affects Swift from version 1.4.6, and the advisory lists the 2.36.0 and 2.37.0 lines and releases before 2.38.2. The posted notice does not say the flaw is being exploited.