A single fix in python-keystoneclient would be sufficient to protect any deployments carrying the patch, but I'm not familiar enough with the vulnerability management & packaging process for clients to make a recommendation against patching any affected services as well.
A single fix in python- keystoneclient would be sufficient to protect any deployments carrying the patch, but I'm not familiar enough with the vulnerability management & packaging process for clients to make a recommendation against patching any affected services as well.