[ubuntu/questing-updates] keystone 2:28.0.0-0ubuntu1.1 (Accepted)
Ubuntu Archive Robot
ubuntu-archive-robot at lists.canonical.com
Tue Nov 4 21:58:22 UTC 2025
keystone (2:28.0.0-0ubuntu1.1) questing-security; urgency=medium
* SECURITY UPDATE: Unauthenticated access to EC2/S3 token endpoints can
grant Keystone authorization (LP: 2119646)
- d/p/lp2119646.patch: Add a policy to enforce authentication with a
user in the service group.
- CVE number pending
Date: 2025-11-04 09:46:19.236388+00:00
Changed-By: Felipe Reyes <felipe.reyes at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/keystone/2:28.0.0-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Questing-changes
mailing list