Erichen

**Name of the Vulnerable Software and Affected Versions** OpenStack Keystone versions prior to 29.0.2 **Description** The federated token rescoping mechanism fails to propagate the original token's expiry to the newly issued token. When a federated user rescopes a token through the 'POST /v3/auth/tokens' endpoint, the `handle scoped token()` function in the mapped authentication plugin returns response data lacking an `expires at` value. Consequently, the token provider issues a token with a fresh default Time To Live (TTL). This allows users to maintain indefinite access by repeatedly rescoping tokens before they expire, bypassing configured token lifetime policies. This issue only affects deployments utilizing federated identity, such as SAML2 or OpenID Connect. **Recommendations** Update to version 29.0.2 or later.

**Name of the Vulnerable Software and Affected Versions** OpenStack Ironic versions prior to a3f6d73 **Description** An infinite loop can occur during image handling when checksum calculations are performed using the 'file:///dev/zero' URL. **Recommendations** Update to version a3f6d73 or later.

**Name of the Vulnerable Software and Affected Versions** Apache Commons versions 2.2 through 2.14.x **Description** An uncontrolled recursion issue exists when processing untrusted configuration files. Specifically, the software throws a StackOverflowError—a runtime error that occurs when the call stack exceeds its allocated memory—when handling YAML input containing cycles. **Recommendations** Upgrade to version 2.15.0.

**Name of the Vulnerable Software and Affected Versions** OpenStack Horizon versions 25.6 through 25.7.2 OpenStack Horizon versions 25.7 through 25.7.2 **Description** A write operation occurs in the session storage backend before authentication, allowing unauthenticated requests to exhaust the storage. Specifically, the login view stores a post-login redirect URL in the server-side session before the user is authenticated, which can be exploited to cause a session flood. **Recommendations** Update to version 25.7.3.