Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/keystone@2014.1.1-2?distro=trixie
purl pkg:deb/debian/keystone@2014.1.1-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-s5ab-apmg-dqd9 OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles. CVE-2014-3476
GHSA-274v-r947-v34r

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:38:38.405918+00:00 Debian Importer Fixing VCID-s5ab-apmg-dqd9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-12T17:49:27.436082+00:00 Debian Importer Fixing VCID-s5ab-apmg-dqd9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:28:03.108064+00:00 Debian Importer Fixing VCID-s5ab-apmg-dqd9 https://security-tracker.debian.org/tracker/data/json 38.1.0