-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 16:11:18 +0100
Source: python-keystonemiddleware
Binary: python-keystonemiddleware-doc python3-keystonemiddleware
Architecture: all
Version: 10.9.0-2+deb13u2
Distribution: trixie
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Description:
 python-keystonemiddleware-doc - Middleware for OpenStack Identity (Keystone) - doc
 python3-keystonemiddleware - Middleware for OpenStack Identity (Keystone) - Python 3.x
Closes: 1152543
Changes:
 python-keystonemiddleware (10.9.0-2+deb13u2) trixie; urgency=high
 .
   * CVE-2026-115642 / OSSA-2026-050: keystonemiddleware access_rules bypass
     via X-Service-Token. Applied upstream patch "Fix service-token presence
     bypass of access_rules and token bind". (Closes: #1152543):
     - CVE-2026-115642_OSSA-2026-050_Fix_service_token_presence_bypass_o....patch
Checksums-Sha1:
 25a5bca8c5c614e1c7e1fe1cb4cfd55a916cf87b 1007712 python-keystonemiddleware-doc_10.9.0-2+deb13u2_all.deb
 0e66f25e1460d0c63121f962b57fad60875f41af 19418 python-keystonemiddleware_10.9.0-2+deb13u2_all-buildd.buildinfo
 f663dda882ec4df081b2ba6f8a703da8a2849fd4 81424 python3-keystonemiddleware_10.9.0-2+deb13u2_all.deb
Checksums-Sha256:
 435adcec6cfe4db7c595a889035c3a8151bb9280cb50c8a3e2d054558faa856a 1007712 python-keystonemiddleware-doc_10.9.0-2+deb13u2_all.deb
 fdbc7fd8102329153d570279fca94ce0d77248d299472c9525d44759dd7b5656 19418 python-keystonemiddleware_10.9.0-2+deb13u2_all-buildd.buildinfo
 cf8731555eec13735db762c344f9c0c5761c216fc896fd866123748b0c967075 81424 python3-keystonemiddleware_10.9.0-2+deb13u2_all.deb
Files:
 275b442de11030948c58eea61f9294cf 1007712 doc optional python-keystonemiddleware-doc_10.9.0-2+deb13u2_all.deb
 4562e1296f8a5e12ba6c8df15af9f6b5 19418 python optional python-keystonemiddleware_10.9.0-2+deb13u2_all-buildd.buildinfo
 fdb701877b7c74dcac773fc8c49dcd2b 81424 python optional python3-keystonemiddleware_10.9.0-2+deb13u2_all.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmr3prwACgkQPkCWRKsh
20cmrw/8CnQzNyEEDl2nedU3nUyGkRhyZAHccTkDQnyTiBem416JBg1kdsUwBGih
1Z8Jofd7LTSY0mkQT5MwX2HKUMy1klRAAqnSFcQ2rhvkPjmFpyEHOeqGvSit2X31
JvcXCfx1xjaMMLfs9zRFqUYPGa7IRixUCk35Dvtgwr3rK18s9paGw+Eahp+ZHHhM
f4iKY+cGRhotcysvk2T+JwIiAAkeD6idySAS3Z1A7Gt5nurPKjkevSaVanpkRa/b
hMLbvZtlGOpvzwdVTPStMgH9aO6DVA0CyZGWngL8HqSVEWVWK9vybyD0ZDFeFAFl
q3/QFCJKDX/RJ+wHS5FGGEwcMz+P1Xa7tXNIJptYGNrJF5CfExxFOuTRTUM6F+xL
r2rxB60a/AX7HEr5m/p+y3fu3w+QOOvTf9/4+C8aHueANZBoE1ysqDvLKuVn8+NG
dH1cFG/2i46eDUq/g3SXSsfOm5tg6mzh3jJhW5Z3gniYPC9mmSnO3aNXTNqHspDx
t4xBO+SUwfPPD4wxig1reDNtqdtQuyPvhu6ODrMRFFiLwEH49JP98cAn9Rt2bi++
G1xbYlq5VwWMPNl+XneUBlZURBenaWPLr7G7zjZvOH96M80rMnClL3vgXF+qudhL
a+intr21qXtpnKNvqNICCAE6EZQj5RAwlKMumG1R3NjVS6vOl20=
=3DrX
-----END PGP SIGNATURE-----