-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 30 Oct 2026 14:15:09 +0100 Source: python-keystonemiddleware Architecture: source Version: 13.0.1-5 Distribution: unstable Urgency: high Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1152543 Changes: python-keystonemiddleware (13.0.1-5) unstable; urgency=high . * CVE-2026-115642 / OSSA-2026-050: keystonemiddleware access_rules bypass via X-Service-Token. Applied upstream patch "Fix service-token presence bypass of access_rules and token bind". (Closes: #1152543): - CVE-2026-115642_OSSA-2026-050_Fix_service_token_presence_bypass_o....patch Checksums-Sha1: a672c238d0aef6959c38c252f7f5cc55c9058ffc 3161 python-keystonemiddleware_13.0.1-5.dsc 89bfb7a68b9de56aae814f6bde92dbfae30560ad 9328 python-keystonemiddleware_13.0.1-5.debian.tar.xz 26d7aaa2b57d557be3e00ce4f0a74a1d70bcb9e1 18731 python-keystonemiddleware_13.0.1-5_amd64.buildinfo Checksums-Sha256: ea33cb1f4ce72266ac716457620a155853f2e2bd90dc2266d9ed33b9f3909526 3161 python-keystonemiddleware_13.0.1-5.dsc 311452593bed9eb69d39d294fb912dc53dd09a4ad021822fffb07ef1b7d7ca46 9328 python-keystonemiddleware_13.0.1-5.debian.tar.xz cc7db548b0ef24402ec3a5a712eae63dbfae5df3ea87b949dac22385ebcbdbb3 18731 python-keystonemiddleware_13.0.1-5_amd64.buildinfo Files: 5c548860fcecf0c55bc9107b420928ce 3161 python optional python-keystonemiddleware_13.0.1-5.dsc f25be7880942340f21d4c6de9bcd7015 9328 python optional python-keystonemiddleware_13.0.1-5.debian.tar.xz 9fde43847d65014133908ce75431d16e 18731 python optional python-keystonemiddleware_13.0.1-5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmrkmYIACgkQ1BatFaxr Q/7WlQ//YLhdY229wVZ10cQQZDgqef+iqdeOVYDAIIoG3JlyjRVL/DHU7OJTAvma iYoE7eWOPEiYmKZiPY5mG6fz1X9MP3zu8vll1apEujffSZ5u1FOFG9R/qzDFOVcs M8XxHGqfqpyET3fR63WWvSWsaLot6FyvCl9vh4B01pLNCcp8dJsMf4fh6dKbTtiW a2DEzPpUZm9vFJw5BnDENEEd2xhvUAIxATuzMA0b5+owxhAJPExIYKuoq/ROAHmV Y2MyhWQNmCW0R/myAEpHc7dTZXheKdh3poRqxJVw3RPv5zvwFUQykmWJcVqPUvuu 2BpDIlaMuQTABAlLs+6y9b4ZSNr1MePjvlSLDfvUlqQPx2JE2d/Rg0yzP0Ki+Vk3 7hLCE9aCGkVEyUIGKkkXsOUaU6BPzpsSSgqLFN0UH2UJYDZnicRpFVdX9zq/0PjB uyyzmGyQjwTfP3iAixK7MkZCSdnnV1btgB40nDJarm79NUpG6glN2WaV7BVPryMg D+UNNTqSmbSLtspO1L9dd3+7M67K54iLnTQS/r+Tv+6L0hl76kHHDTfMRlRWYTjv MWtRs/ZsBGH81zof1ZJUPB4ADgNHddPPvniYPoL3WGHztepxuaRE2YV/kbrTHT8R SALaDB/01Efd0BEA0adzYaRRywFE2Oa5eEGLvApdzlynvaTeAQg= =MuKz -----END PGP SIGNATURE-----