We are tickled pink to announce the release of: oslo.utils 3.40.5: Oslo Utility library This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 3.40.5 ^^^^^^ Security Issues *************** * This patch ensures that we mask sensitive data when masking dicts, even if the case doesn't match. This means the behaviour of mask_password and mask_dict_password is now the same. * Additional password names were included from real world logs that contained sensitive information. * This patch ensures we actually mask sensitive data, even if case doesn't match the static entry we have in the patterns. * It also ensures that some fancy names with a common base, but added number are actually taken care of. Bug Fixes ********* * https://bugs.launchpad.net/tripleo/+bug/1850843 Changes in oslo.utils 3.40.4..3.40.5 ------------------------------------ 566e14c Make mask_dict_password case insensitive and add new patterns f6d5df1 Make mask_password case insensitive, and add new patterns 3bd9803 Mask encryption_key_id Diffstat (except docs and test files) ------------------------------------- oslo_utils/strutils.py | 43 ++++++++++------- .../mask-dict-passwords-99357ffb7972fb0b.yaml | 9 ++++ .../mask-password-patterns-f41524069b8ae488.yaml | 8 ++++ 4 files changed, 97 insertions(+), 17 deletions(-)
participants (1)
-
no-reply@openstack.org