diff --git a/etc/kayobe/kolla-image-tags.yml b/etc/kayobe/kolla-image-tags.yml
index 87976a92c..4bc216bd8 100644
--- a/etc/kayobe/kolla-image-tags.yml
+++ b/etc/kayobe/kolla-image-tags.yml
@@ -54,9 +54,9 @@ kolla_image_tags:
     ubuntu-jammy: 2024.1-ubuntu-jammy-20251103T065408
     ubuntu-noble: 2024.1-ubuntu-noble-20251103T065408
   keystone:
-    rocky-9: 2024.1-rocky-9-20250717T094248
-    ubuntu-jammy: 2024.1-ubuntu-jammy-20250627T102805
-    ubuntu-noble: 2024.1-ubuntu-noble-20250627T102805
+    rocky-9: 2024.1-rocky-9-20251031T092724
+    ubuntu-jammy: 2024.1-ubuntu-jammy-20251031T092724
+    ubuntu-noble: 2024.1-ubuntu-noble-20251031T092724
   kolla_toolbox:
     rocky-9: 2024.1-rocky-9-20250908T155427
     ubuntu-jammy: 2024.1-ubuntu-jammy-20250529T081147
diff --git a/releasenotes/notes/bump-keystone-image-ec2token-98caa61ccf86c944.yaml b/releasenotes/notes/bump-keystone-image-ec2token-98caa61ccf86c944.yaml
new file mode 100644
index 000000000..3576d6aaa
--- /dev/null
+++ b/releasenotes/notes/bump-keystone-image-ec2token-98caa61ccf86c944.yaml
@@ -0,0 +1,6 @@
+---
+security:
+  - |
+    Security fixes for `bug 2119646 <https://launchpad.net/bugs/2119646>`__:
+    Unauthenticated access to EC2/S3 token
+    endpoints can grant Keystone authorization.