-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Sep 2026 15:30:56 +0200 Source: swift Binary: python3-swift swift swift-account swift-container swift-doc swift-drive-audit swift-object swift-object-expirer swift-proxy Architecture: all Version: 2.35.1-0+deb13u4 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Thomas Goirand Description: python3-swift - distributed virtual object store - Python 3 libraries swift - distributed virtual object store - common files swift-account - distributed virtual object store - account server swift-container - distributed virtual object store - container server swift-doc - distributed virtual object store - documentation swift-drive-audit - distributed virtual object store - drive audit swift-object - distributed virtual object store - object server swift-object-expirer - distributed virtual object store - object-expirer swift-proxy - distributed virtual object store - proxy server Closes: 1148834 Changes: swift (2.35.1-0+deb13u4) trixie-security; urgency=medium . * CVE-2026-97149 / OSSA-2026-041: TempURL PUT with an X-Copy-From header reads another container (cross-container information disclosure). Applied upstream patch: - CVE-2026-97149_OSSA-2026-041_tempurl_Disallow_X-Copy-From_on_tem....patch ("tempurl: Disallow X-Copy-From on tempurl requests") (Closes: #1148834). * Blacklist two more non-deterministic tests of the same family as the already blacklisted test_operations_timing_stats_with_incr_timeout: - test_operations_timing_stats_with_get_timeout - test_operations_timing_stats_with_set_timeout Checksums-Sha1: 07a8bbe7118917bccfe1c9371e7f7b9d19428260 737964 python3-swift_2.35.1-0+deb13u4_all.deb 86efc581fca577a99a77e141003df66ae3a93209 98804 swift-account_2.35.1-0+deb13u4_all.deb 959292d8456a9c7ef9bafc9e563dc8c026943962 104960 swift-container_2.35.1-0+deb13u4_all.deb bc1b37e63280c273bd418ef8b4da8d4ba8811ae4 2363184 swift-doc_2.35.1-0+deb13u4_all.deb 8faab7c528701d8589939881d37e82b2817ca504 79708 swift-drive-audit_2.35.1-0+deb13u4_all.deb 988ca43189f1e524bd536d8cd56f9b64bc6b50da 83704 swift-object-expirer_2.35.1-0+deb13u4_all.deb 03bd64f42f6e34e880dddc901e64a77c1caaaf1f 112908 swift-object_2.35.1-0+deb13u4_all.deb 51b3ab0301b74dd651ecbecdcf9e08ac9d0e4451 115128 swift-proxy_2.35.1-0+deb13u4_all.deb 4a7c2b281007744ee279b9a18b47021dc17fec4d 14707 swift_2.35.1-0+deb13u4_all-buildd.buildinfo 48fd12b57497f0b70f040b5ce0b4c508a071ebbf 105024 swift_2.35.1-0+deb13u4_all.deb Checksums-Sha256: 805f0bc929022401507220c2f52ff4a63cc96d08b80c9be13814d3eb2e862651 737964 python3-swift_2.35.1-0+deb13u4_all.deb 7c5a84962ae7ad6ed948b8853084b492f852ea22cc1915506d5368bffda5ff48 98804 swift-account_2.35.1-0+deb13u4_all.deb 1a13bedaddfa32759eadb0cb46c0b3aec28c39de5b1368deec75e9e17b89844d 104960 swift-container_2.35.1-0+deb13u4_all.deb 0776385043642ea56a035ec239bb0b1fa27ec4f2bc9a5a8c8daa0929ee23f040 2363184 swift-doc_2.35.1-0+deb13u4_all.deb ca18d3d2636780c114bca37521e6e244a43fdaf8e0b8fbbc3c111b2c6b3118e3 79708 swift-drive-audit_2.35.1-0+deb13u4_all.deb 901da5a296b0bae70540e535b833d3ed0a2cb3d2adc08decded19e32ca86fcbf 83704 swift-object-expirer_2.35.1-0+deb13u4_all.deb 7296f2b3d758112806991c87d1ba1a51256c64b800df21cb573873234acd4a7a 112908 swift-object_2.35.1-0+deb13u4_all.deb 006b2222ac63a41617805f98a2e88c4b59ffd26b14640785f177ae7074e33e76 115128 swift-proxy_2.35.1-0+deb13u4_all.deb 1e908ac82d1bcaaa7eed31dea67dba7dab6eab503f1e2220c13a966b928baa3d 14707 swift_2.35.1-0+deb13u4_all-buildd.buildinfo a300ef2ec50b92b633edf63cff4d528efd1ed16a55414275ef6b95a43b6e5377 105024 swift_2.35.1-0+deb13u4_all.deb Files: 8e8c49dfdab0358171bb62e06442a292 737964 python optional python3-swift_2.35.1-0+deb13u4_all.deb 647c624d76dfe1a078f810b6c4d8c601 98804 net optional swift-account_2.35.1-0+deb13u4_all.deb c114c07cfff32245423fab6bf093fcb6 104960 net optional swift-container_2.35.1-0+deb13u4_all.deb 85751533da579ed023f40edf245ef115 2363184 doc optional swift-doc_2.35.1-0+deb13u4_all.deb fc57e871cdded3fad96aa855ca9ee1f5 79708 net optional swift-drive-audit_2.35.1-0+deb13u4_all.deb 7712daf62cf11a93776265538c35d4a8 83704 net optional swift-object-expirer_2.35.1-0+deb13u4_all.deb 8d16a65c3137297f828b9c322d38c83e 112908 net optional swift-object_2.35.1-0+deb13u4_all.deb cd2bb5d4fa0e3668472912a03fbf4b46 115128 net optional swift-proxy_2.35.1-0+deb13u4_all.deb ba1757431129faa715c8f843883efe1a 14707 net optional swift_2.35.1-0+deb13u4_all-buildd.buildinfo 47e0569cc013b4a24686d64e6d956c8e 105024 net optional swift_2.35.1-0+deb13u4_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmq1m94ACgkQPkCWRKsh 20dQSRAAweUyEFVlQ5+ZQqh7YXCTd3RQ6BxtiCDufE8Bn3boEcWP+wXTt6oFy1bw 45RYJKft/NrHVfA8nSIVG4mi6+LKNkpVoNI7FzbNyPNrQF5oSIF02cqiA163Y78J YH5lgdeyNHSxhW1Cxyl/PxInFndrHqc9rH5IyaM4S5xHVC7jGo8R5SMFIqdvn8Eb wq6Bmg8R5EwppuvFYoVCP0LQ71tCJqaSmDFIfGbiI5XWfJTEuNErgmA1ZuHKCJ1B TFolrzd8xbh/sIZWIzMJC+lm5nK0rBYzgVowO59i7Pc8pHw23fS8q7NOM05tM5hj +/kZDmgAhOdExQ7A5YkqNV6syEWiGe7L9Fv45r6R/Nh5+qFBDVHh3845rYlU94ik 9cOoR1DKhOul679/asoqhzqQYevEDVvXCruiXwslse+1V3xarzubnqdGxGd9197c zyjKyUQMqOURpBpPc2wmyAPEnpqiC5+EnBuA/vmWVJe7hUdHOaQ8Gkk+XI4bVBI8 SFWFkFL36eM8pwkldBcU1haRFMaVshUmb5nzW07gu4zgnFht3IxBoQRNLn4147D0 NJAEZYlLiDveEqjOP4vhcxS1qXUykIYs+I3OBugDoKmTlhQ4GMZWWwMUCoRo4T+0 St8ocIzzScoM+77BtC8xLGh223SDPwYmbm8jMrJOZinC1C8S2XQ= =8uXK -----END PGP SIGNATURE-----