Skip to content
OpenAdvisories
Medium RHSA-2022:8873 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) security update

Published Sep 18, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.1::el8 python-oslo-utils 0:3.41.6-1.20220426095230.f4deaad.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 python-oslo-utils-lang 0:3.41.6-1.20220426095230.f4deaad.el8ost
Red Hat · OpenStack 16 openstack:16.1::el8 python3-oslo-utils 0:3.41.6-1.20220426095230.f4deaad.el8ost

Vulnerabilities 1

  • Medium 4.9
    CVE-2022-0718

    python-oslo-utils has improper password parsing

    A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

    python-oslo.utils oslo-utils python-oslo.utils Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2056850
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8873.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-0718
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0718
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0718