Control: tag -1 pending Hello,
Bug #1150261 in zaqar reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/openstack-team/services/zaqar/-/commit/03bb364283e79a84b604b62e191499d313327f9e ------------------------------------------------------------------------ * CVE-2026-pending / OSSA-2026-043: Zaqar WebSocket project substitution allows cross-project queue access. Applied upstream patch "Prohibit arbitrary project-id for websocket protocol access". (Closes: #1150261): - CVE-2026-pending_OSSA-2026-043_Prohibit_arbitrary_project-id_fo....patch ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1150261
