Accepted zaqar 23.0.0-2 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 07 Oct 2026 20:42:34 +0200
Source: zaqar
Architecture: source
Version: 23.0.0-2
Distribution: unstable
Urgency: high
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1150261
Changes:
 zaqar (23.0.0-2) unstable; urgency=high
 .
   * CVE-2026-pending / OSSA-2026-043: Zaqar WebSocket project substitution
     allows cross-project queue access. Applied upstream patch "Prohibit
     arbitrary project-id for websocket protocol access". (Closes: #1150261):
     - CVE-2026-pending_OSSA-2026-043_Prohibit_arbitrary_project-id_fo....patch
Checksums-Sha1:
 fb6ae9b3410128403536d74617ab40f80a941d2d 3149 zaqar_23.0.0-2.dsc
 9556f738c26e18c8a675de951be012c96b2fee79 11964 zaqar_23.0.0-2.debian.tar.xz
 9fb9d7daceba1f07dd4fbfd105b6fe9c57c6ecf2 16925 zaqar_23.0.0-2_amd64.buildinfo
Checksums-Sha256:
 d9886644a438db5e96f2667d5554ac6564014e1664f7770afb9a03c1934d144d 3149 zaqar_23.0.0-2.dsc
 71cdc1fb6d4c7f3784186e483e17181cd748afb016297cdae73ae07de004c3f6 11964 zaqar_23.0.0-2.debian.tar.xz
 7559b89f4f71c1b04fec398dfaf03102486d69d9329fa9b55427e41c9b150055 16925 zaqar_23.0.0-2_amd64.buildinfo
Files:
 2a96dee3efff507b2dea7e2a0cd42665 3149 net optional zaqar_23.0.0-2.dsc
 cda2aa8e8784d59eef2296ed0dd4c38b 11964 net optional zaqar_23.0.0-2.debian.tar.xz
 7a04cbed0bfa4278dcb78b733743a2ce 16925 net optional zaqar_23.0.0-2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=FUMG
-----END PGP SIGNATURE-----