-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 28 May 2026 18:02:56 +0200 Source: swift Architecture: source Version: 2.37.1-4 Distribution: unstable Urgency: high Maintainer: Debian OpenStack <[email protected]> Changed-By: Thomas Goirand <[email protected]> Closes: 1137333 1138170 Changes: swift (2.37.1-4) unstable; urgency=high . * CVE-2026-49017: Swift proxy-server denial of service via truncated s3api chunked upload. Applied upstream patch: "s3api: Error on truncated aws-chunked input" (Closes: #1138170). * Refreshed patches: - drive-full-checker.patch - fix-writing-non-ascii-in-headers-in-tests.patch * Blacklist 6 more non-deterministic tests (Closes: #1137333): - test_sync_reconstructor_exception_during_rebuild - test_fetch_data_from_cache_connection_error - test_container_update_as_greenthread - test_GET_disconnect - Test_profile_log.test_clear - Test_profile_log.test_get_logfiles Checksums-Sha1: 8b2d37296324e747ae0a0c35af9f76ac79db1949 3159 swift_2.37.1-4.dsc 1f0b0ebf97c6332fa6410ce171691ac119ad7c4d 35100 swift_2.37.1-4.debian.tar.xz ab5ce53ffd958634ded1bbe11201c0e96ca598b9 14328 swift_2.37.1-4_amd64.buildinfo Checksums-Sha256: b43005e48c84be06a735c56cf3fa4d8f55145c4344dedc5ff6557fae76b22e99 3159 swift_2.37.1-4.dsc 33572794527bb25750cc8c4a73c0d5b086963aa784c6364c0558e5d37c72882d 35100 swift_2.37.1-4.debian.tar.xz ef4f3c394365198aef9d9c0693e94baee00d0bc2e35061c8b8541300be74571b 14328 swift_2.37.1-4_amd64.buildinfo Files: 026f2802a2bad409f8022d844832d496 3159 net optional swift_2.37.1-4.dsc 612c38b515ac2a11c9b8a9a7f97aff8d 35100 net optional swift_2.37.1-4.debian.tar.xz f831d0a175eef4448ec632d79283e36d 14328 net optional swift_2.37.1-4_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmoYcmMACgkQ1BatFaxr Q/64HA/+PMkrV7ucII3jzAPWZmTaM3Gd5b/gKc7ABwpfQoAB4y/2SrNQNwO6P7SC wxzch3SPYSfw7U886lAk6e3RroEQwKEMpIpw5rcmwfjXRMsgdcUKZWCjDrqEwty4 Jmigiy7PdVGlkehLTKiLYSHXUYXTXL+Dyg8uNvqQyH1BZJ7kDA3Idw9UXOTzUHha yJ2ngrLfdEXn6CuDgvbX8hfBhXLtTdOKiK1eg4/5UPTEjpxbD+qedzaVI2CbtUKT ojWvW5fyXYe1G2c9XRSusl8PIxIBH+hxvcKaGEidQb/dz57gtCYu5M23c/+jZ5DX Q+x0E9mJIIVR9J/6Hvme3ygrvzd+74H2+Su6Ve4VrUIB0TYih0yYvsJw+GTrvYy+ ZxnnGJbNzPy9cb+UWBsNDk/saElGsaVmSA54ExgaOKtoGtssrD4AUdzJHCptmJFw mJTBl4OHz6yGpMkTvxs3x9r7qpBFmfn8QPBFzVLne2kWUe6Jf8wlk8mZtKF80m1w NxMyh+zAvHvOl6ypwnvngQnJW1S8euLco2EakMXBVxg0fA37pj6H2QaKYKXOSxRf raa0+Woy7K4NJi7bB2O3oNMiUNevOSCnS80v8gzslvTgbr9O2PozOA9BzgD8xVq/ 4UGKJnazLRJnpy2g2moSFMk/d+QD0FPiYnnjGAd39f5Iuyk5wOM= =WSVI -----END PGP SIGNATURE-----
pgpw9JYTnkgyZ.pgp
Description: PGP signature
