Dear Stable release team,

[ Reason ]
I'd like to upload a new version of Zaqar to address:
https://security.openstack.org/ossa/OSSA-2026-029.html
aka:
https://bugs.debian.org/1142858

[ Impact ]
As per upstream announce:

OpenStack Zaqar through 22.0.0 allows authentication bypass via an
EXTRA-SPEC header when a UUID is known.

[ Tests ]
Tests are run at package build time. Otherwise, I do rely
on upstream CI for functional tests (as I do not run Zaqar
in production myself).

[ Risks ]
The patch is rather small.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
Just upstream patch.

Please allow me to upload Zaqar 20.0.0-2+deb13u1 to p-u.

Cheers,

Thomas Goirand (zigo)