Bump Keystone to include fixes for bug 2119646 (#1962)

m-bull · web-flow · commit 823545d8981b · 2025-11-04T15:47:39.000+01:00
diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml
@@ -10,8 +10,8 @@ kolla_image_tags:
     rocky-9: 2025.1-rocky-9-20251013T135156
     ubuntu-noble: 2025.1-ubuntu-noble-20251013T135156
   keystone:
-    rocky-9: 2025.1-rocky-9-20250805T134044
-    ubuntu-noble: 2025.1-ubuntu-noble-20250805T134044
+    rocky-9: 2025.1-rocky-9-20251031T094539
+    ubuntu-noble: 2025.1-ubuntu-noble-20251031T094539
   kolla_toolbox:
     rocky-9: 2025.1-rocky-9-20250905T151507
     ubuntu-noble: 2025.1-ubuntu-noble-20250905T151507
diff --git a/releasenotes/notes/bump-keystone-image-ec2token-6de2c31005e4bf41.yaml b/releasenotes/notes/bump-keystone-image-ec2token-6de2c31005e4bf41.yaml
@@ -0,0 +1,6 @@
+---
+security:
+  - |
+    Security fixes for `bug 2119646 <https://launchpad.net/bugs/2119646>`__:
+    Unauthenticated access to EC2/S3 token
+    endpoints can grant Keystone authorization.
