Bump Keystone to include fixes for bug 2119646 (#1967)

m-bull · web-flow · commit ec46618898a6 · 2025-11-04T15:47:26.000+01:00
diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml
@@ -21,6 +21,9 @@ kolla_image_tags:
   heat:
     rocky-9: zed-rocky-9-20240320T113114
     ubuntu-jammy: zed-ubuntu-jammy-20240320T113114
+  keystone:
+    rocky-9: zed-rocky-9-20251031T100240
+    ubuntu-jammy: zed-ubuntu-jammy-20251031T100240
   horizon:
     rocky-9: zed-rocky-9-20240514T095142
     ubuntu-jammy: zed-ubuntu-jammy-20240514T092357
diff --git a/releasenotes/notes/bump-keystone-image-ec2token-df77217b1aa3d939.yaml b/releasenotes/notes/bump-keystone-image-ec2token-df77217b1aa3d939.yaml
@@ -0,0 +1,6 @@
+---
+security:
+  - |
+    Security fixes for `bug 2119646 <https://launchpad.net/bugs/2119646>`__:
+    Unauthenticated access to EC2/S3 token
+    endpoints can grant Keystone authorization.
