-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Jan 2026 08:57:22 +0100 Source: python-keystonemiddleware Binary: python-keystonemiddleware-doc python3-keystonemiddleware Architecture: all Version: 10.9.0-2+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Thomas Goirand Description: python-keystonemiddleware-doc - Middleware for OpenStack Identity (Keystone) - doc python3-keystonemiddleware - Middleware for OpenStack Identity (Keystone) - Python 3.x Closes: 1125680 Changes: python-keystonemiddleware (10.9.0-2+deb13u1) trixie-security; urgency=medium . * CVE-2026-22797 / OSSA-2026-001: privilege escalation via spoofed identity headers. Applied upstream patch: Fix privilege escalation via spoofed identity headers (Closes: #1125680). Checksums-Sha1: e31d946a58a1f0861ccf050e79fc1d8d1dab73d7 1007572 python-keystonemiddleware-doc_10.9.0-2+deb13u1_all.deb 1d55964361901a65379745756982b3d2dcab9deb 18941 python-keystonemiddleware_10.9.0-2+deb13u1_all-buildd.buildinfo 81f7c0e4295648fa9317669909e5523382e55442 80260 python3-keystonemiddleware_10.9.0-2+deb13u1_all.deb Checksums-Sha256: 3ab41ad74a9ca668d9f23d1927c91d060f4255c70ccc0fc6457bffdfb5b0dfbe 1007572 python-keystonemiddleware-doc_10.9.0-2+deb13u1_all.deb 143fde60194f26d8069442a3d176153a425777cf0343570c43db7b1b85504d9f 18941 python-keystonemiddleware_10.9.0-2+deb13u1_all-buildd.buildinfo 2593e4a1d64da58924cb5a137bfa0912ca023a770c45dd73c8416f583b347cce 80260 python3-keystonemiddleware_10.9.0-2+deb13u1_all.deb Files: abd097530022b4b9981514748bab9d3d 1007572 doc optional python-keystonemiddleware-doc_10.9.0-2+deb13u1_all.deb 834071bec9f96384f73f9e029a9654df 18941 python optional python-keystonemiddleware_10.9.0-2+deb13u1_all-buildd.buildinfo 666a12cfbe5e34238fddf91322130bb7 80260 python optional python3-keystonemiddleware_10.9.0-2+deb13u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmlt7/YACgkQJm69HxMT N+oLig//Smcl5buwvxK/ARdb1jgcwQVg0GJ71FZPE4rq7Rc5UjFWt716SyJcwxjy eMZVOfkq2bUBxhRgSSjAWUrmm8++Q9mAS/9C04In57TBMRw97qTr2uuMyPH2lUlC m59Fm/eVcJf7myIxMxEuggMw9W896XZS61yKO5BtLQKMahaGSXBrQEMefLhSkfi3 KY7PxtMUfmDs1yfMYa1MWXX9Cwj+Swkq6eHX8IzPdPLkFgZq02pahVfjQQRjy1gA bJQZc8Ek3+CizZ4uH8Iy+U31EjNX/D6KBFqtM9iX1G/VfQSC8BbDaseCZ4Cc9QC+ +2FKHq3AeRcd0R13jF4ka9OPp5pzyMk8uuUHYVMFLCVq3xcrbmihteemXVm3m4Wf NqH61b5JnuWADnWhKw4QQiB2vn6s1ZM/ilvBEyN6PWAcLYH82xOOQX0RHwdBwOTo CQyNCIcB+tlrnbn0yiZ5PS4oVF/PdEi4OHr/QZk07nWIpUJ2T6CqC6qjVS73QwmR ti7iSlGfFf34YX283dPZHyc5ET83fB7k42GkrjEiwZXcT6Y8BOzKDgJeUBcGaCsN czoCJLQtc+NhSq8hK98D9FkQTnRFCl+2WOwNKvqhRosIm1rXctsEqKdlIa8KJl9J k85qWqmeQgM9WrrYO5OmG4E8n9LRYjYoLLWEreZKwtT5UYsPRW4= =tyUn -----END PGP SIGNATURE-----