Debian Patches
Status for python-keystonemiddleware/13.0.1-5
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| uwsgi-401-framed-response.patch | Avoid TCP RST on 401 short-circuit under uwsgi keystonemiddleware rejects invalid tokens by raising webob.exc.HTTPUnauthorized, whose generate_response() deletes Content-Length, making the response close-delimited. The middleware also short-circuits before reading the request body, so uwsgi closes the connection with unread data pending: the kernel then sends a TCP RST which destroys the close-delimited response client-side (httpx/requests: [Errno 104] Connection reset by peer). . Fix by draining the request body and returning a framed webob.Response (Content-Length kept) instead of raising the webob exception. =================================================================== |
Thomas Goirand <zigo@debian.org> | no | 2026-10-15 | ||
| no-intersphinx.patch | No intersphinx. =================================================================== |
Thomas Goirand <zigo@debian.org> | not-needed | 2017-10-05 | ||
| CVE-2026-115642_OSSA-2026-050_Fix_service_token_presence_bypass_of_access_rules_and_token_bind.patch | Fix service-token presence bypass of access_rules and token bind . In BaseAuthProtocol.validate_allowed_request, the presence of the X-Service-Token header alone was treated as sufficient to skip application credential access_rules enforcement. The same presence check gated _confirm_token_bind(), so an arbitrary X-Service-Token also skipped Kerberos (and other) token binding when delay_auth_decision left the request alive. . Require service_token_valid before skipping either check. diff --git a/keystonemiddleware/auth_token/__init__.py b/keystonemiddleware/auth_token/__init__.py index 5fc164d..9104390 100644 |
Artem Goncharov <artem.goncharov@gmail.com> | yes | debian upstream | upstream, https://review.opendev.org/c/openstack/keystonemiddleware/+/1012871 | 2026-10-30 |
All known versions for source package 'python-keystonemiddleware'
- 13.0.1-5 (sid, forky)
- 10.9.0-2+deb13u1 (trixie-security, trixie)
- 10.1.0-4 (bookworm)