Hi zigo, On Wed, Aug 19, 2026 at 09:31:03AM +0200, Thomas Goirand wrote: > > I have just uploaded Swift. It was fixed in Trixie with this announce: > > https://lists.debian.org/debian-security-announce/2026/msg00360.html > > but please note that Swift in Bookworm is not affected by CVE-2026-71191, > CVE-2026-71192.
Is this a Debian specific thing? Because I looked at the upstream advisory [1] and bug [2] before marking not-affected in the security-tracker and they say only versions older than 2.18.0 are not affected by these two CVEs. Should we warn them it is a different version? > Can someone issue the DLA for me please ? Thanks for the upload fixing the vulnerabilities! DLA-4746-1 was reserved and the advisory sent to the mailing list. Cheers, Charles [1] https://security.openstack.org/ossa/OSSA-2026-030.html [2] https://bugs.launchpad.net/swift/+bug/2158733
