Debian/keystone: high 8.8
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in the authentication request matches the
Action: Upgrade keystone to 2:29.0.1-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:29.0.1-2 | - |
Fixed versions
| 2:29.0.1-2 |
Sources
- osv: DEBIAN-CVE-2026-42998#Debian:14/keystone
- https://security-tracker.debian.org/tracker/CVE-2026-42998
published · modified · JSON