Skip to content
OpenAdvisories
Medium RHSA-2022:0993 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-oslo-utils) security update

Published Sep 18, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.2::el8 python-oslo-utils 0:3.41.6-2.20220111011750.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python-oslo-utils-lang 0:3.41.6-2.20220111011750.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python3-oslo-utils 0:3.41.6-2.20220111011750.el8ost

Vulnerabilities 1

  • Medium 4.9
    CVE-2022-0718

    python-oslo-utils has improper password parsing

    A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

    python-oslo.utils oslo-utils python-oslo.utils Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2056850
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0993.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-0718
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0718
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0718