Train Series Release Notes

3.41.6-4

Security Issues

  • This patch ensures that we mask sensitive data when masking passwords, even if double quotes are used as password values.

Bug Fixes

  • Fix regex used to mask the password. The strutils.mask_password function will now correctly handle passwords that contain single or double quotes. Previously, only the characters before the quote were masked.

3.41.5

Bug Fixes

  • QEMU 4.1.0 output shifts to scientific notation at 1000MB, breaking oslo.utils. QemuImgInfo is now fixed to support this notation.

3.41.4

Security Issues

  • This patch ensures that we mask sensitive data when masking dicts, even if the case doesn’t match. This means the behaviour of mask_password and mask_dict_password is now the same.

  • Additional password names were included from real world logs that contained sensitive information.

3.41.3

Security Issues

  • This patch ensures we actually mask sensitive data, even if case doesn’t match the static entry we have in the patterns.

  • It also ensures that some fancy names with a common base, but added number are actually taken care of.

Bug Fixes