Skip to content
OpenAdvisories
High DLA-4367-1 1 CVE

keystone - security update

Published Nov 7, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 keystone 2:18.1.0-1+deb11u2

Vulnerabilities 1

  • High 7.5
    CVE-2025-65073

    OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.

    OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

    OpenStack Keystone keystone keystone Debian Ubuntu PyPI