Accepted swift 2.30.1-0+deb12u2 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 19 Aug 2026 08:59:52 +0200
Source: swift
Architecture: source
Version: 2.30.1-0+deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1140678 1142973
Changes:
 swift (2.30.1-0+deb12u2) bookworm-security; urgency=medium
 .
   * CVE-2026-50221: Swift proxy-server SSRF via internal update header
     injection: applied upstream patch: Block internal update headers at the
     gatekeeper (Closes: #1140678).
   * CVE-2026-71190 / OSSA-2026-031: proxy denial of service via Accept header.
     Applied upstream patch:
     - swob: avoid excessive backtracking in Accept parser
     (Closes: #1142973).
Checksums-Sha1:
 b9e1f6869fd28c728ed60cc3be6e802c502a3448 3425 swift_2.30.1-0+deb12u2.dsc
 205218916663afee32c8535ef478e44c9669160d 2540964 swift_2.30.1.orig.tar.xz
 a200cf8866cf0eb626f358979526cbe20f654263 35344 swift_2.30.1-0+deb12u2.debian.tar.xz
 b29bd3e6fe7942cb1ae654b227186ecf035ceaf5 15913 swift_2.30.1-0+deb12u2_amd64.buildinfo
Checksums-Sha256:
 6c5320db942432ccabf1fe5142a29ce90c8ac5dae34e5bd8a1a62f67374b9c7a 3425 swift_2.30.1-0+deb12u2.dsc
 56a8683a00f6a0803c0b71ffb9f7e6306b6f0d4cf673fa4e044bbefdf4bd5a8e 2540964 swift_2.30.1.orig.tar.xz
 cb6df127d37520a5994af31010888a86ba46d14a499eee1f8568fd7921ee3dd7 35344 swift_2.30.1-0+deb12u2.debian.tar.xz
 ececa9716267bf7ff87081408c0723db491b223c4803357d8211ed21895bd791 15913 swift_2.30.1-0+deb12u2_amd64.buildinfo
Files:
 f3944d67a5a004f164c102b5958e0cea 3425 net optional swift_2.30.1-0+deb12u2.dsc
 fcaa278f05eb9c8993b5d56189eaace3 2540964 net optional swift_2.30.1.orig.tar.xz
 9dd5fc889f34cc5a3a74d87f459ed5d4 35344 net optional swift_2.30.1-0+deb12u2.debian.tar.xz
 93469cf303df9a1f30ee8cf8ddfaa5e6 15913 net optional swift_2.30.1-0+deb12u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=p8K1
-----END PGP SIGNATURE-----