-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 16:11:18 +0100
Source: python-keystonemiddleware
Architecture: source
Version: 10.9.0-2+deb13u2
Distribution: trixie
Urgency: high
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1152543
Changes:
 python-keystonemiddleware (10.9.0-2+deb13u2) trixie; urgency=high
 .
   * CVE-2026-115642 / OSSA-2026-050: keystonemiddleware access_rules bypass
     via X-Service-Token. Applied upstream patch "Fix service-token presence
     bypass of access_rules and token bind". (Closes: #1152543):
     - CVE-2026-115642_OSSA-2026-050_Fix_service_token_presence_bypass_o....patch
Checksums-Sha1:
 641152c3c8a9fd9e31053b1e4855f2b80c19cccd 3183 python-keystonemiddleware_10.9.0-2+deb13u2.dsc
 f2b232adc0aee0fa7a816839526c5dcf29ef06b7 9956 python-keystonemiddleware_10.9.0-2+deb13u2.debian.tar.xz
 780b9d6b04de4c9fa3ce0bad918e6501da6dc7d6 19727 python-keystonemiddleware_10.9.0-2+deb13u2_amd64.buildinfo
Checksums-Sha256:
 4c3238eecfadf7bf3895e08be9275f0d08ca8cd6eb539fb9b7a59e81600f174c 3183 python-keystonemiddleware_10.9.0-2+deb13u2.dsc
 2d7746f27c45206a1ab09d083893fdf55416e53e59001d4d20e7d45df9606484 9956 python-keystonemiddleware_10.9.0-2+deb13u2.debian.tar.xz
 aeff8fb3bd7eb714b082ebd9cf0cc5e6f2a5d74d7a5fded83cc75d07b7ad1977 19727 python-keystonemiddleware_10.9.0-2+deb13u2_amd64.buildinfo
Files:
 55a6d4a049e061884f69d56aa88989f7 3183 python optional python-keystonemiddleware_10.9.0-2+deb13u2.dsc
 7a3b8c9e9070b73bcc8a942b7c83099b 9956 python optional python-keystonemiddleware_10.9.0-2+deb13u2.debian.tar.xz
 11ee7452eec1dddc439c21dad5fc214f 19727 python optional python-keystonemiddleware_10.9.0-2+deb13u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ZEso
-----END PGP SIGNATURE-----