[release-announce] oslo.utils 3.40.5 (stein)

no-reply at openstack.org no-reply at openstack.org
Thu Jan 9 19:02:09 UTC 2020


We are tickled pink to announce the release of:

oslo.utils 3.40.5: Oslo Utility library

This release is part of the stein stable release series.

The source is available from:

    https://opendev.org/openstack/oslo.utils

Download the package from:

    https://pypi.org/project/oslo.utils

Please report issues through:

    https://bugs.launchpad.net/oslo.utils/+bugs

For more details, please see below.

3.40.5
^^^^^^


Security Issues
***************

* This patch ensures that we mask sensitive data when masking dicts,
  even if the case doesn't match. This means the behaviour of
  mask_password and mask_dict_password is now the same.

* Additional password names were included from real world logs that
  contained sensitive information.

* This patch ensures we actually mask sensitive data, even if case
  doesn't match the static entry we have in the patterns.

* It also ensures that some fancy names with a common base, but
  added number are actually taken care of.


Bug Fixes
*********

* https://bugs.launchpad.net/tripleo/+bug/1850843

Changes in oslo.utils 3.40.4..3.40.5
------------------------------------

566e14c Make mask_dict_password case insensitive and add new patterns
f6d5df1 Make mask_password case insensitive, and add new patterns
3bd9803 Mask encryption_key_id


Diffstat (except docs and test files)
-------------------------------------

oslo_utils/strutils.py                             | 43 ++++++++++-------
.../mask-dict-passwords-99357ffb7972fb0b.yaml      |  9 ++++
.../mask-password-patterns-f41524069b8ae488.yaml   |  8 ++++
4 files changed, 97 insertions(+), 17 deletions(-)







More information about the Release-announce mailing list