According to https://security-tracker.debian.org/tracker/CVE-2018-14432
[jessie] - keystone <end-of-life> (Not supported in Jessie) https://salsa.debian.org/security-tracker-team/security-tracker/commit/3af1be6fb2f917d1809cdcec011f6b66ffe11234 But I don't see keystone listed in the security-support-ended file: https://salsa.debian.org/debian/debian-security-support/blob/master/security-support-ended.deb8 We have got a new TODO item to fix keystone for Jessie: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/270cb63d918d3324b3dccfb93b45458824faf100 I assume this was a mistake, and keystone should be listed in security-support-ended? -- Brian May <br...@linuxpenguins.xyz> https://linuxpenguins.xyz/brian/