CVE-2026-108276: Debian/request-tracker5 vulnerability

Q: Which package should be checked for exposure?

The affected software entry identifies the Debian package as request-tracker5.

Q: What upstream release is associated with this CVE?

The provided references include the Request Tracker rt-5.0.11 release tag. The supplied data does not state whether that release fixes the issue or which package versions are affected.

Published Oct 29, 2026

Updated

Affected Software

4 affected components

debian/request-tracker5*

debian/request-tracker5<=5.0.3+dfsg-3~deb12u6, <=5.0.7+dfsg-4+deb13u3, <=5.0.10+dfsg-3

Event History

Oct 29, 2026

CVE Published

via OSV·11:47 PM

Data Sourced

via OSV·11:47 PM

DescriptionAffected Software

Frequently Asked Questions

Which package should be checked for exposure?

The affected software entry identifies the Debian package as request-tracker5.

What upstream release is associated with this CVE?

The provided references include the Request Tracker rt-5.0.11 release tag. The supplied data does not state whether that release fixes the issue or which package versions are affected.