Astra Linux – Vulnerability in python-oslo.utils

A flaw was discovered in python-oslo-utils. Due to improper parsing, passwords that contain double quotes " cause incorrect masking in debug logs, resulting in any part of the password after the double quote being displayed as plain text...

OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

PYSEC-2026-3492 OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

almanach (>=4.0.1, <=4.0.6), networking-mlnx (>=11.0.0, <=11.1.0) +2 more potentially affected by CVE-2026-44393 via oslo-messaging (>=1.8.3, <=5.26.0)

oslo-messaging PYPI version =1.8.3, =4.0.1, =11.0.0, =1.0.0, =2015.1.6 - tacker 0.6.0 Source cves: CVE-2026-44393 Source advisory: OSV:PYSEC-2026-3492...

PT-2026-64101

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When ssl ca file is configured, the driver enables certificate chain validation but does not pass the...

oslo-vmware (0.11.2) potentially affected by CVE-2025-50181 via urllib3 (1.10.4)

urllib3 PYPI version 1.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - oslo-vmware 0.11.2 Source cves: CVE-2025-50181 Source advisory: OSV:PYSEC-2026-1999...

PYSEC-2026-892 OpenStack Oslo utility sensitive information exposure via log files

The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...

OpenStack Oslo utility sensitive information exposure via log files

The strutils.maskpassword function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when logging commands, which allows local users to obtain passwords by reading the log...

CVE-2026-44393

A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS Transport Layer Security connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonat...

Debian dsa-6341 : ironic-api - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6341 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6341-1 [email protected]...

OPENSUSE-SU-2026:10973-1 python3-oslo.messaging-doc-18.1.0-1.1 on GA media

These are all security issues fixed in the python3-oslo.messaging-doc-18.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-44393

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

GHSA-76QH-XR7Q-H39M OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

almanach (>=4.0.1, <=4.0.6), networking-mlnx (>=11.0.0, <=11.1.0) +2 more potentially affected by CVE-2026-44393 via oslo-messaging (>=1.8.3, <=5.26.0)

oslo-messaging PYPI version =1.8.3, =4.0.1, =11.0.0, =1.0.0, =2015.1.6 - tacker 0.6.0 Source cves: CVE-2026-44393 Source advisory: OSV:GHSA-76QH-XR7Q-H39M...

CVE-2026-44393

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

CVE-2026-44393

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

CVE-2026-44393

The OpenStack oslo.messaging RabbitMQ driver (versions 1.0.0 through 17.3.0) fails to perform TLS hostname verification when connecting to a message broker. While the driver enables certificate chain validation when ssl_ca_file is configured, it fails to pass the expected broker hostname to the u...

CVE-2026-44393

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

CVE-2026-44393

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...