Mistral didn't make use of the oslo_utils "mask_password" methods, leading in sensitive data leakage in its logs. This patch corrects this security issue. Note that it depends on oslo_utils patch adding new patterns, and ensuring it's case-insensitive. Change-Id: I544d3c172f2dea02c62c49c311c4b5954413ae15 Related-Bug: #1850843 Co-Authored-By: Dougal Matthews <dougal@redhat.com> Signed-off-by: Cédric Jeanneret <cjeanner@redhat.com>
6 lines
143 B
YAML
6 lines
143 B
YAML
---
|
|
security:
|
|
- Ensure we mask sensitive data before logging Action return values
|
|
fixes:
|
|
- https://bugs.launchpad.net/tripleo/+bug/1850843
|