Debian/keystone: high 7.7
In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the user_enabled_invert configuration option is False (the default). The _l
Action: Upgrade keystone to 2:27.0.0-3+deb13u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:27.0.0-3+deb13u3 | - |
Fixed versions
| 2:27.0.0-3+deb13u3 |
Sources
- osv: DEBIAN-CVE-2026-40683#Debian:13/keystone
- https://security-tracker.debian.org/tracker/CVE-2026-40683
published · modified · JSON