CVE-2024-1141
Fixed in a distro release EPSS <1%CVSS 5.5
A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.
Products: Red Hat OpenStack Platform 17.1 for RHEL 9, Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 18.0
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | glance-store | no fix |
| PyPI | glance-store | 4.7.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | python-glance-store | no fix |
| Debian 13 | python-glance-store | 4.7.0-2 |
| Debian 14 | python-glance-store | 4.7.0-2 |
| Red Hat openstack 17.1 | python-glance-store | 0:2.5.1-17.1.20230621023901.el9ost |
| Red Hat openstack 17.1 | python3-glance-store | 0:2.5.1-17.1.20230621023901.el9ost |
| Ubuntu 16.04 LTS | python-glance-store | no fix |
| Ubuntu 18.04 LTS | python-glance-store | no fix |
| Ubuntu 20.04 LTS | python-glance-store | 2.0.0-0ubuntu4.3 |
| Ubuntu 22.04 LTS | python-glance-store | 3.0.0-0ubuntu1.4 |
| Ubuntu 24.04 LTS | python-glance-store | 4.6.1-0ubuntu3 |