1.0Yaookhttps://yaook.cloud/enStefan Hoffmannhttps://yaook.cloud/en/author/yaook-admin/rich600338<blockquote class="wp-embedded-content" data-secret="XwFtwhypOV"><a href="https://yaook.cloud/en/security-advisories-ossa-2026-037/">security-advisories/ossa-2026-037</a></blockquote><iframe sandbox="allow-scripts" security="restricted" src="https://yaook.cloud/en/security-advisories-ossa-2026-037/embed/#?secret=XwFtwhypOV" width="600" height="338" title="“security-advisories/ossa-2026-037” — Yaook" data-secret="XwFtwhypOV" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" class="wp-embedded-content"></iframe><script> /*! This file is auto-generated */ !function(d,l){"use strict";l.querySelector&&d.addEventListener&&"undefined"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!/[^a-zA-Z0-9]/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),o=l.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),c=new RegExp("^https?:$","i"),i=0;i<o.length;i++)o[i].style.display="none";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute("style"),"height"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):"link"===t.message&&(r=new URL(s.getAttribute("src")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener("message",d.wp.receiveEmbedMessage,!1),l.addEventListener("DOMContentLoaded",function(){for(var e,t,s=l.querySelectorAll("iframe.wp-embedded-content"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute("data-secret"))||(t=Math.random().toString(36).substring(2,12),e.src+="#?secret="+t,e.setAttribute("data-secret",t)),e.contentWindow.postMessage({message:"ready",secret:t},"*")},!1)))}(window,document); //# sourceURL=https://yaook.cloud/wp-includes/js/wp-embed.min.js </script>YAOOK Security Advisory for keystone cve-2026-pending OSSA-2026-037 Date: 2026-08-25 Upstream advisory: https://security.openstack.org/ossa/OSSA-2026-037.html Upstream bug: https://bugs.launchpad.net/keystone/+bug/2153453 https://bugs.launchpad.net/keystone/+bug/2158538 What are OSSA-2026-037 and how do they affect YAOOK? Grzegorz Grasza (Red Hat) and Tim Shephard (roiai.ca) independently identified that OpenStack Keystone does not consistently enforce scope restrictions on tokens obtained via delegated authentication methods (ec2credential, application credential, OAuth1 […]