Processing commands for [email protected]: > forcemerge 1149303 1149956 Bug #1149303 [src:keystone] lp-2159643: Delegated tokens (like ec2credential, application_credential, ...) can GET/PATCH/DELETE any credential including TOTP seeds (CVE-2026-pending) Bug #1149956 [src:keystone] keystone: CVE-2026-90460 Set Bug forwarded-to-address to 'https://bugs.launchpad.net/keystone/+bug/2159643'. Severity set to 'serious' from 'important' Marked as found in versions keystone/2:27.0.0-3+deb13u5 and keystone/2:22.0.2-0+deb12u3. Bug #1149303 [src:keystone] lp-2159643: Delegated tokens (like ec2credential, application_credential, ...) can GET/PATCH/DELETE any credential including TOTP seeds (CVE-2026-pending) Marked as found in versions keystone/2:27.0.0-3. Merged 1149303 1149956 > End of message, stopping processing here.
Please contact me if you need assistance. -- 1149303: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1149303 1149956: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1149956 Debian Bug Tracking System Contact [email protected] with problems
