Skip to content
Debian Keystone Security Updates Address Critical Vulnerabilities

Debian Keystone Security Updates Address Critical Vulnerabilities

First seen 2 Sep 2026, 13:13 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 3, 2026 at 13:06 UTC
  • •Two critical security updates released for Debian Keystone package.
  • •Vulnerabilities include authentication bypass and information disclosure.
  • •Users are advised to upgrade Keystone packages immediately.

Debian has released two critical security updates for the Keystone package affecting different distributions. The first update, DSA-6480, addresses an important authentication bypass and information disclosure vulnerability in version 2:27.0.0-3+deb13u5 for the stable distribution (trixie). The second update, DLA-4767, fixes issues in version 2:22.0.2-0+deb12u4 for the long-term support distribution (bookworm). Users are urged to upgrade their Keystone packages to mitigate these vulnerabilities. The vulnerabilities could potentially allow unauthorized access and information leakage, impacting systems running Debian. Detailed security status and patching guidance are available on Debian's security tracker pages.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 50d ago How this analysis works

Timeline

2026-09-01
DSA-6480 released
Debian released an important update for Keystone addressing auth bypass and info disclosure in version 2:27.0.0-3+deb13u5 for stable distribution.
Linuxsecurity
2026-09-02
DLA-4767 released
Debian LTS issued a security update for Keystone fixing vulnerabilities in version 2:22.0.2-0+deb12u4 for long-term support distribution.
Linuxsecurity

More articles in this cluster (2)