Skip to content
OpenAdvisories
Medium USN-5369-1 1 CVE

python-oslo.utils vulnerability

Published Apr 7, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that oslo.utils incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS python-oslo.utils 3.35.0-0ubuntu1.1
Ubuntu · 20.04 LTS 20.04:LTS python-oslo.utils 4.1.1-0ubuntu1.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS python-oslo.utils 3.8.0-2ubuntu0.1~esm1

Vulnerabilities 1

  • Medium 4.9
    CVE-2022-0718

    python-oslo-utils has improper password parsing

    A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

    python-oslo.utils oslo-utils python-oslo.utils Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-0718