Accepted keystone 2:29.0.2-1 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 25 Aug 2026 16:10:20 +0200
Source: keystone
Architecture: source
Version: 2:29.0.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1145669
Changes:
 keystone (2:29.0.2-1) unstable; urgency=medium
 .
   * New upstream point release.
   * Removed patches applied upstream:
     - 0001-Add-tests-for-restricted-app-cred-guard.patch
     - 0002-Block-restricted-app-creds-from-creating-EC2-credent.patch
     - 0003-Block-app-credential-token-rescoping.patch
     - 0004-Include-system-scope-in-rescope-guard.patch
     - 0005-Enforce-app-cred-project-boundary-on-EC2-credential-.patch
     - 0006-Block-app-cred-tokens-from-authorizing-OAuth1-reques.patch
     - CVE-2026-43001_1_Enforce_delegation_project_boundary_for_delegat....patch
     - CVE-2026-43001_2_Fix_user_impersonation_through_application_cred....patch
     - CVE-2026-43001_3_Forbid_trust_operations_using_application_crede....patch
     - CVE-2026-43001_4_Preserve_expires_at_when_rescoping_federated_to....patch
     - CVE-2026-43001_5_Prevent_RBAC_policy_bypass_via_JSON_body_and_qu....patch
   * Add new patches (Closes: #1145669):
     - CVE-2026-80182_CVE-2026-80184_1_Ban_ec2credential_tokens_from_Ke....patch
     - CVE-2026-80182_CVE-2026-80184_2_trusts_oauth1_app-creds_reject_d....patch
     - CVE-2026-80182_CVE-2026-80184_3_lp-2158538-2026.1.patch
     - CVE-2026-80182_CVE-2026-80184_4_auth_encode_ec2credential_and_oa....patch
     - CVE-2026-80182_CVE-2026-80184_5_fix-unit-test.patch
   * Really do not run this (non-deterministic) test:
     - test_bootstrap_is_not_idempotent_when_password_does_change
Checksums-Sha1:
 436016f6d1c800060d7c798cdf746c72efd994d7 3458 keystone_29.0.2-1.dsc
 e63747b15e2a0051e1d8fda748d21a98ba7f7e42 1130748 keystone_29.0.2.orig.tar.xz
 376d634617b95aae29aa206c5293bdd52334094e 62644 keystone_29.0.2-1.debian.tar.xz
 22590e16a130d44d7a5585b480c0a46382002ec4 17306 keystone_29.0.2-1_amd64.buildinfo
Checksums-Sha256:
 f2324b1418b175d80fc09a8ab6f0de41331d06c464dac77cc3fdb3b59cdc413b 3458 keystone_29.0.2-1.dsc
 dbdf2cd0f94353c0232299e305f0b40fae443e5540160fc65b8d23c2befd9b13 1130748 keystone_29.0.2.orig.tar.xz
 f731e1a701c2b440a30bf677f7e369eb06c33f69385553112de5256258e01a69 62644 keystone_29.0.2-1.debian.tar.xz
 35919c447c02946024b0a94b3480bb071fc7c4389b791ee1e619d7b8425b4483 17306 keystone_29.0.2-1_amd64.buildinfo
Files:
 690ec27828bda59505182d3eaa56d2a7 3458 net optional keystone_29.0.2-1.dsc
 8bc9d92e8aaf629ba07c68eb6d810beb 1130748 net optional keystone_29.0.2.orig.tar.xz
 816eda02266d8a0c9872037b5cd84d69 62644 net optional keystone_29.0.2-1.debian.tar.xz
 94017282d4071501254f5075f41fa5aa 17306 net optional keystone_29.0.2-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=CNSS
-----END PGP SIGNATURE-----