Accepted swift 2.37.1-6 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 22 Jul 2026 21:04:34 +0200
Source: swift
Architecture: source
Version: 2.37.1-6
Distribution: unstable
Urgency: high
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1142972 1142973
Changes:
 swift (2.37.1-6) unstable; urgency=high
 .
   * OSSA-2026-030 / CVE-2026-pending1: Swift S3API header authorization bypass.
     Applied upstream patch:
     - "s3api: require signing of sensitive SigV4 x-amz headers"
     - "s3api: drop native Swift control headers from client requests"
     (Closes: #1142972).
   * OSSA-2026-031 / CVE-2026-pending2: proxy denial of service via Accept header.
     Applied upstream patch:
     - swob: avoid excessive backtracking in Accept parser
     (Closes: #1142973).
Checksums-Sha1:
 3ddb2574a4805f76a81654b3f5809086a8c4d1a0 3159 swift_2.37.1-6.dsc
 f9a36c91ffc43c5b98c435fcead18398bc6f50ee 39620 swift_2.37.1-6.debian.tar.xz
 f35f562e8037df524482a325dcb9c00bb86be765 14328 swift_2.37.1-6_amd64.buildinfo
Checksums-Sha256:
 21b5514d896202826fb0478cf05fdd49ceab678513ad10e2a2b0e4da9801c81b 3159 swift_2.37.1-6.dsc
 a7e8431b394d69bfcff69e1217a3b3655aca5b76630ebdacec607d2ed057918c 39620 swift_2.37.1-6.debian.tar.xz
 b0adfcce58a3165e16fb815d4568952fcc5e4062795b318360655c3a2d1ad642 14328 swift_2.37.1-6_amd64.buildinfo
Files:
 1b108b981048672da66821da9fdd5b27 3159 net optional swift_2.37.1-6.dsc
 5abc0a61c988837ab58fd6060205394c 39620 net optional swift_2.37.1-6.debian.tar.xz
 d6c70569a206db47b5e7691892591317 14328 net optional swift_2.37.1-6_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=qA/P
-----END PGP SIGNATURE-----