Vulnerabilities for python-keystoneclient

First version without a known vulnerability: 1.6.0

Details

• GHSA-4rrr-j7ff-r8442022-05-17

  python-keystoneclient missing expiration check in PKI token validation

  Fixed in: 0.2.4

• GHSA-pxxv-rv32-2qgv2022-05-17

  OpenStack Nova uses insecure keystone middleware tmpdir by default

  Fixed in: 0.2.4

• GHSA-7f2c-vp52-gmfw2022-05-17

  OpenStack keystonemiddleware does not verify certificate

  Fixed in: 0.11.0, 1.2.0

• GHSA-p9wq-mjh8-q72m2022-05-17

  OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks

  Fixed in: 1.6.0, 1.4.0

• GHSA-8q2m-pwxf-jc7g2022-05-17

  python-keystoneclient unsecure user password update

  Fixed in: 0.2.4

• GHSA-gwvq-rgqf-993f2022-05-17

  python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware

  Fixed in: 0.7.0

• GHSA-qh2x-hpf9-cf2g2022-05-05

  OpenStack Keystone and other components vulnerable to Improper Certificate Validation

  Fixed in: 0.4.0, 7.0.0a0, 8.0.0a0

• GHSA-c3xq-cj8f-78292021-10-12

  Inadequate Encryption Strength in python-keystoneclient

  Fixed in: 0.3.0

• GHSA-9vg3-cf92-h2h72020-03-10

  Insufficient Verification of Data Authenticity in python-keystoneclient

  Fixed in: 0.3.0