Skip to content
OpenAdvisories
High DSA-6056-1 1 CVE

keystone - security update

Published Nov 13, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 12 keystone 2:22.0.2-0+deb12u1
Debian · 13 keystone 2:27.0.0-3+deb13u1

Vulnerabilities 1

  • High 7.5
    CVE-2025-65073

    OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.

    OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

    OpenStack Keystone keystone keystone Debian Ubuntu PyPI