Hi,

The following vulnerabilities were published for request-tracker5.

CVE-2026-105454[0], CVE-2026-108270[1], CVE-2026-108271[2],
CVE-2026-108272[3], CVE-2026-108273[4], CVE-2026-108274[5],
CVE-2026-108275[6], CVE-2026-108276[7], CVE-2026-108277[8],
CVE-2026-108278[9], CVE-2026-108279[10], CVE-2026-108280[11],
CVE-2026-108281[12], CVE-2026-108282[13], CVE-2026-108342[14],
CVE-2026-108343[15], CVE-2026-108344[16], CVE-2026-108346[17],
CVE-2026-108347[18], CVE-2026-108348[19], CVE-2026-108349[20],
CVE-2026-108350[21], CVE-2026-108351[22], CVE-2026-108352[23],
CVE-2026-108353[24], CVE-2026-108363[25], CVE-2026-108365[26],
CVE-2026-108371[27].

Due to the amount of CVEs we have not yet tracked down the needed
fixes from the repository to address the individual CVEs.

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-105454
https://www.cve.org/CVERecord?id=CVE-2026-105454
[1] https://security-tracker.debian.org/tracker/CVE-2026-108270
https://www.cve.org/CVERecord?id=CVE-2026-108270
[2] https://security-tracker.debian.org/tracker/CVE-2026-108271
https://www.cve.org/CVERecord?id=CVE-2026-108271
[3] https://security-tracker.debian.org/tracker/CVE-2026-108272
https://www.cve.org/CVERecord?id=CVE-2026-108272
[4] https://security-tracker.debian.org/tracker/CVE-2026-108273
https://www.cve.org/CVERecord?id=CVE-2026-108273
[5] https://security-tracker.debian.org/tracker/CVE-2026-108274
https://www.cve.org/CVERecord?id=CVE-2026-108274
[6] https://security-tracker.debian.org/tracker/CVE-2026-108275
https://www.cve.org/CVERecord?id=CVE-2026-108275
[7] https://security-tracker.debian.org/tracker/CVE-2026-108276
https://www.cve.org/CVERecord?id=CVE-2026-108276
[8] https://security-tracker.debian.org/tracker/CVE-2026-108277
https://www.cve.org/CVERecord?id=CVE-2026-108277
[9] https://security-tracker.debian.org/tracker/CVE-2026-108278
https://www.cve.org/CVERecord?id=CVE-2026-108278
[10] https://security-tracker.debian.org/tracker/CVE-2026-108279
https://www.cve.org/CVERecord?id=CVE-2026-108279
[11] https://security-tracker.debian.org/tracker/CVE-2026-108280
https://www.cve.org/CVERecord?id=CVE-2026-108280
[12] https://security-tracker.debian.org/tracker/CVE-2026-108281
https://www.cve.org/CVERecord?id=CVE-2026-108281
[13] https://security-tracker.debian.org/tracker/CVE-2026-108282
https://www.cve.org/CVERecord?id=CVE-2026-108282
[14] https://security-tracker.debian.org/tracker/CVE-2026-108342
https://www.cve.org/CVERecord?id=CVE-2026-108342
[15] https://security-tracker.debian.org/tracker/CVE-2026-108343
https://www.cve.org/CVERecord?id=CVE-2026-108343
[16] https://security-tracker.debian.org/tracker/CVE-2026-108344
https://www.cve.org/CVERecord?id=CVE-2026-108344
[17] https://security-tracker.debian.org/tracker/CVE-2026-108346
https://www.cve.org/CVERecord?id=CVE-2026-108346
[18] https://security-tracker.debian.org/tracker/CVE-2026-108347
https://www.cve.org/CVERecord?id=CVE-2026-108347
[19] https://security-tracker.debian.org/tracker/CVE-2026-108348
https://www.cve.org/CVERecord?id=CVE-2026-108348
[20] https://security-tracker.debian.org/tracker/CVE-2026-108349
https://www.cve.org/CVERecord?id=CVE-2026-108349
[21] https://security-tracker.debian.org/tracker/CVE-2026-108350
https://www.cve.org/CVERecord?id=CVE-2026-108350
[22] https://security-tracker.debian.org/tracker/CVE-2026-108351
https://www.cve.org/CVERecord?id=CVE-2026-108351
[23] https://security-tracker.debian.org/tracker/CVE-2026-108352
https://www.cve.org/CVERecord?id=CVE-2026-108352
[24] https://security-tracker.debian.org/tracker/CVE-2026-108353
https://www.cve.org/CVERecord?id=CVE-2026-108353
[25] https://security-tracker.debian.org/tracker/CVE-2026-108363
https://www.cve.org/CVERecord?id=CVE-2026-108363
[26] https://security-tracker.debian.org/tracker/CVE-2026-108365
https://www.cve.org/CVERecord?id=CVE-2026-108365
[27] https://security-tracker.debian.org/tracker/CVE-2026-108371
https://www.cve.org/CVERecord?id=CVE-2026-108371
[28] https://github.com/bestpractical/rt/releases/tag/rt-5.0.11

Regards,
Salvatore