[Git][security-tracker-team/security-tracker][master] Add CVE-2026-107363/zaqar

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d0c2aa12 by Salvatore Bonaccorso at 2026-10-08T06:57:39+02:00
Add CVE-2026-107363/zaqar

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16260,6 +16260,10 @@ CVE-2026-12227 (The Visual Composer Website Builder plugin for WordPress is vuln
 	NOT-FOR-US: WordPress plugin
 CVE-2025-32000 (HCL Sametime is vulnerable to insufficient input sanitization. The app ...)
 	NOT-FOR-US: HCL
+CVE-2026-107363 [OSSA-2026-043]
+	- zaqar 23.0.0-2 (bug #1150261)
+	NOTE: https://security.openstack.org/ossa/OSSA-2026-043.html
+	NOTE: https://bugs.launchpad.net/ossa/+bug/2161402
 CVE-2026-97404 (In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Si ...)
 	- zaqar 23.0.0~rc1-3 (bug #1148897)
 	[trixie] - zaqar <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0c2aa12180d33a59404cc47b2a7ab13855c7d20

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d0c2aa12180d33a59404cc47b2a7ab13855c7d20
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/73dd6a27/attachment.htm>