-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 17 Aug 2026 11:01:41 +0200 Source: swift Binary: python3-swift swift swift-account swift-container swift-doc swift-drive-audit swift-object swift-object-expirer swift-proxy Architecture: all Version: 2.35.1-0+deb13u3 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Thomas Goirand Description: python3-swift - distributed virtual object store - Python 3 libraries swift - distributed virtual object store - common files swift-account - distributed virtual object store - account server swift-container - distributed virtual object store - container server swift-doc - distributed virtual object store - documentation swift-drive-audit - distributed virtual object store - drive audit swift-object - distributed virtual object store - object server swift-object-expirer - distributed virtual object store - object-expirer swift-proxy - distributed virtual object store - proxy server Closes: 1140678 1142972 1142973 Changes: swift (2.35.1-0+deb13u3) trixie-security; urgency=medium . * CVE-2026-71191 / OSSA-2026-030: Swift S3API header authorization bypass. Applied upstream patch: - "s3api: require signing of sensitive SigV4 x-amz headers" - "s3api: drop native Swift control headers from client requests" (Closes: #1142972). * CVE-2026-71192 / OSSA-2026-031: proxy denial of service via Accept header. Applied upstream patch: - "swob: avoid excessive backtracking in Accept parser" (Closes: #1142973). * CVE-2026-50221: Swift proxy-server SSRF via internal update header injection: applied upstream patch: Block internal update headers at the gatekeeper (Closes: #1140678). Checksums-Sha1: 9d06aa129020ae377a5b44b55c848ea1c81d0cbe 737840 python3-swift_2.35.1-0+deb13u3_all.deb 7ad39121dcd871647d982fc24dfd2e3e1d163ccf 98576 swift-account_2.35.1-0+deb13u3_all.deb ae1f61d3774601675786d4929a654d93804a0f9d 104724 swift-container_2.35.1-0+deb13u3_all.deb f95c9fb3ecd91c840616b2b285b0c9e4d2123e0b 2363200 swift-doc_2.35.1-0+deb13u3_all.deb ef130b034922c7be363e2ece2e7a665347bbaf85 79488 swift-drive-audit_2.35.1-0+deb13u3_all.deb a9aad0ff7b8ef0260bc0b950cbd0934425a5acab 83492 swift-object-expirer_2.35.1-0+deb13u3_all.deb 0590dc42e78253a1debffa12471ab2e8bf773611 112692 swift-object_2.35.1-0+deb13u3_all.deb a1f4e266ffbc9e0d13f00f3a2f5478e5c699dabd 114892 swift-proxy_2.35.1-0+deb13u3_all.deb 6ef708fa2611db90f4729141d773692ce532a69a 14652 swift_2.35.1-0+deb13u3_all-buildd.buildinfo 3055f11c888dd9cb2752a92f86c170fb11bbb911 104812 swift_2.35.1-0+deb13u3_all.deb Checksums-Sha256: e1ec0b0853236f3957950e6f6e0c02348d3e9ce28b22e7c95ae239d31988b072 737840 python3-swift_2.35.1-0+deb13u3_all.deb f22d0bea6c4cdb70bba16e6c38cca0ffe9226bb30465e0683ad08f2a321435b9 98576 swift-account_2.35.1-0+deb13u3_all.deb 4a88e59693fc0beb105cc60ab5f55b733b004b3ec8d6fa11b4a3ffd5a19ac0ca 104724 swift-container_2.35.1-0+deb13u3_all.deb 44ee0e20a1669a2533deb4b9505627171a759b87e051b1f7474f1e17f81c0102 2363200 swift-doc_2.35.1-0+deb13u3_all.deb 92e06c2582aeeac13bab15c9b3c1cafc45d51af74e693d8093c3fe6b54a3bd1b 79488 swift-drive-audit_2.35.1-0+deb13u3_all.deb b018a59eafd434e8199f92674b5233f63de2a2ba6678cc5d8aca3a184fa12e14 83492 swift-object-expirer_2.35.1-0+deb13u3_all.deb ebedd58b828764aa044d621a84a9e48dba5acdedd618ad1842ab53b73113aed7 112692 swift-object_2.35.1-0+deb13u3_all.deb b6394cd9d3c635c118c8f6bffe32270b7d42955e069bdc135ee3366c5bccccca 114892 swift-proxy_2.35.1-0+deb13u3_all.deb eb1b0915b6ea30b73aea1a250e44482c98b9dd54a5572556b5e9407996ba9ecb 14652 swift_2.35.1-0+deb13u3_all-buildd.buildinfo f4d08807d866cce544bc3bec6e4f9c3852b537f3d957c756148e73a7eb0c3b43 104812 swift_2.35.1-0+deb13u3_all.deb Files: 36d9d08c02c90d0a44f956640ddcee64 737840 python optional python3-swift_2.35.1-0+deb13u3_all.deb e59944fb84fe7cbe6c4509619467028d 98576 net optional swift-account_2.35.1-0+deb13u3_all.deb 774e5dad4228747c1bce947588148f99 104724 net optional swift-container_2.35.1-0+deb13u3_all.deb c81ce298989f05fc598796f884a1a3fc 2363200 doc optional swift-doc_2.35.1-0+deb13u3_all.deb 2df17effbe8e62db893bf08b1ffae381 79488 net optional swift-drive-audit_2.35.1-0+deb13u3_all.deb b976218bde5ea346f45a2d42b192d086 83492 net optional swift-object-expirer_2.35.1-0+deb13u3_all.deb a9495b7651bfc70bae16a81d9afef8b7 112692 net optional swift-object_2.35.1-0+deb13u3_all.deb 47138221091cae07245a7cd4139be3f1 114892 net optional swift-proxy_2.35.1-0+deb13u3_all.deb f51eeee9ef907d47aa3568cae32de3d6 14652 net optional swift_2.35.1-0+deb13u3_all-buildd.buildinfo dca6c89c32b660fe14204286df872dde 104812 net optional swift_2.35.1-0+deb13u3_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmqEHTkACgkQN8Ugyu9d QiTwJBAArSZ2Fg4UaOnQe55CaDRQ9wC5zGkuzfQT2SaKBrDJZd6bxImhl/EPdrXE cfd0lSIb9w2Nrp5xHrJjk8LZdRvAaRkOK9TaIaJFeW4QOrWcMgAGbehZsbwZtlYH 3gsP63SyQuw83D3oMfxSfd7EfRIy27C72fWQEiXlbTVTL34wJD0JWyUVkM6BQWmw y7YbpkfQQyL0vucJGa0J+qywCKORybYmhsGEwZT82mMrK7miMKaUD0naqSNN1VTk YcxVi2NPT/ABrMmftleI67dBO0n2PPo1VGMhVmVWPg69xuzIOYuJCGo/IM8Xl0NA 44mzN7iSjy0b9qoxi+xkDsolf1hMJJPcSsHY6Ituu+MLUKEWZD23lbhkxR7CLcJL o8g6MdZXoVPErDvidKaiF0/8I7a6+0tFQbedLKMKSwgQx6FZP+ubnydQwHtUFS1e Xj5ThmnGW/JTwQ7BVMIvit0giyiYuFGTfT3Is3LJCu+H13bS4qkB0lPRXQq1Ol7U Kh/CN6lw2sSHMMt0r8g8Bxhzg3f3YpuLeeOW2QVGoTcDiIXJFSlO+Lhsiv4h5KTR k4FVJpUcogNv52raRvhsNHZ86p07JMEXo+0sI1ieGufzCih1+5wfbNv9AhDHZbgq szp3ny7W6eEW3QynODJPdcgd//5zu/Kgyeth/mbHl+uZ4wGVC5k= =T83F -----END PGP SIGNATURE-----