Open Stack

OSSA-2013-013.
Still needs to be pushed to openstack-announce.

** Also affects: ossa
   Importance: Undecided
       Status: New

** Changed in: ossa
   Importance: Undecided => Low

** Changed in: ossa
       Status: New => Fix Committed

** Changed in: ossa
     Assignee: (unassigned) => Jeremy Stanley (fungi)

** Summary changed:

- Updating password via keystoneclient CLI should be done securely.
+ [OSSA-2013-013] Updating password via keystoneclient CLI should be done securely

-- 
You received this bug notification because you are a member of OpenStack
Security Group, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/938315

Title:
  [OSSA-2013-013] Updating password via keystoneclient CLI should be
  done securely

Status in OpenStack Security Advisories:
  Fix Committed
Status in Python client library for Keystone:
  Fix Committed

Bug description:
  Updating password via CLI should be done via a secure password prompt,
  not text.

  current: keystone user-password-update --user=jake --password=foo

  expected: keystone user-password-update --user=jake
                          Password:
                          Repeat Password:

To manage notifications about this bug go to:
https://bugs.launchpad.net/ossa/+bug/938315/+subscriptions