Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-glance-store) security update

Fixed packages 2

Vulnerabilities 1

• Medium 5.5
  CVE-2024-1141

  Glance-store: glance store access key logged in debug log level

  A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.

  Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 16.1 Debian Ubuntu PyPI
  Feb 1, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2258836
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2732.json
• report
  https://access.redhat.com/security/cve/CVE-2024-1141
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-1141
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-1141