-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 07 Oct 2026 20:42:34 +0200 Source: zaqar Architecture: source Version: 23.0.0-2 Distribution: unstable Urgency: high Maintainer: Debian OpenStack <[email protected]> Changed-By: Thomas Goirand <[email protected]> Closes: 1150261 Changes: zaqar (23.0.0-2) unstable; urgency=high . * CVE-2026-pending / OSSA-2026-043: Zaqar WebSocket project substitution allows cross-project queue access. Applied upstream patch "Prohibit arbitrary project-id for websocket protocol access". (Closes: #1150261): - CVE-2026-pending_OSSA-2026-043_Prohibit_arbitrary_project-id_fo....patch Checksums-Sha1: fb6ae9b3410128403536d74617ab40f80a941d2d 3149 zaqar_23.0.0-2.dsc 9556f738c26e18c8a675de951be012c96b2fee79 11964 zaqar_23.0.0-2.debian.tar.xz 9fb9d7daceba1f07dd4fbfd105b6fe9c57c6ecf2 16925 zaqar_23.0.0-2_amd64.buildinfo Checksums-Sha256: d9886644a438db5e96f2667d5554ac6564014e1664f7770afb9a03c1934d144d 3149 zaqar_23.0.0-2.dsc 71cdc1fb6d4c7f3784186e483e17181cd748afb016297cdae73ae07de004c3f6 11964 zaqar_23.0.0-2.debian.tar.xz 7559b89f4f71c1b04fec398dfaf03102486d69d9329fa9b55427e41c9b150055 16925 zaqar_23.0.0-2_amd64.buildinfo Files: 2a96dee3efff507b2dea7e2a0cd42665 3149 net optional zaqar_23.0.0-2.dsc cda2aa8e8784d59eef2296ed0dd4c38b 11964 net optional zaqar_23.0.0-2.debian.tar.xz 7a04cbed0bfa4278dcb78b733743a2ce 16925 net optional zaqar_23.0.0-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmrGl+gACgkQ1BatFaxr Q/5lpg//ZaJD/flUBE9abm0/G8WB6SmNHan4U8G3z4nfxMQsf7CkNbulv5RGZPx7 52u3MlVeXTASFhl/e4h9FhmQs6Dw/1Z/Dr7Nmd+WN9PJuXF2z3wTOq/edx42OWto ysouRS3c9QKNdcMzfjgQCXRSbOoy9BjH+ViXwB3YQeix3o3YAMARkI6gopM3x/c7 m4iGxy+3d+H+Wc0VYZRYxrp1EHjgu+AKtKvvoVWgSU3CzSG1ihEPVuolhmw9KXSK 3rwyCKcfXnKUz7wNksGwlDYASn8ujxSF6XgS+JAYe8E/aBuz/2+inbLqMsN/ZJ9A DPCaj2v3ARE5r4s5VXvfvpPL1bwiMkMLJTWZ6+dPEYbSzXH6YqS16DNTyb4UAUdi hWT6P0xNAT2/6RxlTCkWFAWEBXyvDPIP5v+pLvBLiby7HYnuDIXF8Ma1GhiPiF0V WsEb1ltWOBQQYVq/Fh7yGxKXXn42kxzY67I5SHgZRcJnCfxs+BtSlSiyjU+0+Cnv qM/IspVrDGTlNBHp7tYPaMNZK5rDm5zeQpqn/PVgMttrW6QXk9CYE7w1wWnGjOL3 /VJ2VeJqxigpLXqRyDzNetxz8Z+h/po6fGG0xkwF9T9ZzCuyiWjHu4mh+dsTwo4h 57E1u+MXayF92nDaSp6JY/MIGEMtU+RefXDVTzuCojyza7c+j98= =FUMG -----END PGP SIGNATURE-----
pgp4Qn0EmFGvY.pgp
Description: PGP signature
