-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Sep 2026 13:24:52 +0200 Source: swift Architecture: source Version: 2.38.1-3 Distribution: unstable Urgency: high Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1148834 Changes: swift (2.38.1-3) unstable; urgency=high . * OSSA-2026-041 / CVE-2026-97149: TempURL PUT with an X-Copy-From header reads another container (cross-container information disclosure). Applied upstream patch: - CVE-2026-97149_OSSA-2026-041-stable-2026.2.patch ("tempurl: Disallow X-Copy-From on tempurl requests") (Closes: #1148834). Checksums-Sha1: 22f2161c3e81c74ba06e2a0ad076a5e0d05e5adb 3193 swift_2.38.1-3.dsc 1152618fa1286e94d8e88025334ae6626a22fc1d 34892 swift_2.38.1-3.debian.tar.xz 96c5deb76c0aebaed4a392a96d50949a63c40c10 14073 swift_2.38.1-3_amd64.buildinfo Checksums-Sha256: 36e2d3860cfe4acb08961ede776638808cf89aefca8dd39bec85d1d174d1db0c 3193 swift_2.38.1-3.dsc f0755df787bd8b0fa9240f8b3112fb8a53266792d58db67ff0021ec4a9530e30 34892 swift_2.38.1-3.debian.tar.xz afd22559761831f037a74b8bc2fc46f62be0e5fd55d7cca3acef585417dc6a68 14073 swift_2.38.1-3_amd64.buildinfo Files: a8213b919408a9a1624910cdb59e8324 3193 net optional swift_2.38.1-3.dsc dc472b3d42be1b45a3c51c6ceac1cfd3 34892 net optional swift_2.38.1-3.debian.tar.xz 6083158415a8f3999e93b8c2ae86fdc2 14073 net optional swift_2.38.1-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmq1EjoACgkQ1BatFaxr Q/6TdRAAmazPIwggw/IwEunfqg4MQbVuH2k/yc4aeGgmDGskzfdTPrLoLklzqKha uFZsH0bta1FhrKkzczvJZE7OdUdSIe/E8vuw7N0/JOlFuF1OvfBi7zA1UN9fBm+7 u2FQYIHC5R7dQVb09Z3y2dNF5OXKfNcQC+f+lUYAMHNzjZow8nUEwtMcrUmEk9in 2Can2Gso8Nb2L9p1XrZ4ozbc5AdzGGkBIShwc/3Ii1rSh5XGSiZG9nbO1vLWW+RW YvBy/7h/wP9ecuHJd0jAeF9cimfEWo9/3bv+rDWleb7DNuwnf4b3bH+6DZFONAKm 5yqdOJw0tFsgB+XHb/95Br5NfDlkl9uteBppDscV8EqhH36NLe9CyJhzpgQX/ew4 dyFAgUpyMbsRKjY8wJDkgYEkCDuD1F6QbCjkAfPxdW4tH9xn4MswsQjQ8+J5ZBtU 52RIfIDmmeNaC5ks+PQyCPKt1NdFkPhMn+F3GfAMioarB4BAIXxog3905UneoQpT Cx+aQz+kcKd+XsnisMcYwYibcHI4JDcRNtm7R1eXY98eI+MRiyK9EKkznTpqQXKq MuSiSPu6f5r+lBQmdFB/Vkh6rV48l0eTCgaRYdTVC1prltoLwYjVmmO4HIDUndk/ nP5xOHq3tA6Jjp03T5AdiSuZsnQ7Mu/J9Mg8ZghiRdzB4OYJAVU= =XNqS -----END PGP SIGNATURE-----