Description
An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nova | 2:14.0.0-4 | — |
| Debian 13 | nova | 2:14.0.0-4 | — |
| Debian 12 | nova | 2:14.0.0-4 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 10 | python-nova +16 | 1:14.0.6-2.el7ost | RHSA-2017:1595 |
| Red Hat OpenStack 10 | python-novaclient | 1:6.0.0-3.el7ost | RHSA-2017:1595 |
| Red Hat OpenStack 9 | python-nova +15 | 1:13.1.4-1.el7ost | RHSA-2017:1508 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 7 | openstack-ceilometer | 7.0.4~a0~dev7-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-ceilometer-doc | 7.0.4~a0~dev7-3.2 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-cinder +1 | 9.1.5~a0~dev1-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-dashboard | 10.0.4~a0~dev2-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-glance | 13.0.1~a0~dev6-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-glance-doc | 13.0.1~a0~dev6-3.3 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-heat | 7.0.4~a0~dev4-4.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-heat-doc | 7.0.4~a0~dev4-4.2 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-keystone | 10.0.2~a0~dev2-6.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-keystone-doc | 10.0.2~a0~dev2-6.2 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-magnum +1 | 3.1.2~a0~dev22-13.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-manila +1 | 3.0.1~a0~dev27-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-nova | 14.0.6~a0~dev16-3.1 | SUSE-SU-2017:1443-1 |
| SUSE OpenStack Cloud 7 | openstack-nova-doc | 14.0.6~a0~dev16-3.3 | SUSE-SU-2017:1443-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | nova | >= 13.0.0, < 13.1.4 | 13.1.4 | GHSA-f4g4-cj8f-3cr9 |
| PyPI | nova | >= 14.0.0, < 14.0.5 | 14.0.5 | GHSA-f4g4-cj8f-3cr9 |
| PyPI | nova | >= 15.0.1, < 15.0.2 | 15.0.2 | GHSA-f4g4-cj8f-3cr9 |
| PyPI | nova | >= 13.0.0, < 13.1.4 · >= 14.0.0, < 14.0.5 · >= 15.0.1, < 15.0.2 | 13.1.4, 14.0.5, 15.0.2 | PYSEC-2026-432 |
Advisories 3
- RHSA-2017:1595 Red Hat Security Advisory: openstack-nova and python-novaclient security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2017:1508 Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- SUSE-SU-2017:1443-1 Security update for several openstack-components SUSE / openSUSE Security Updates · Feb 4, 2026
References
- RHSA-2017:1595 vendor-advisory
- 96998 vdb-entry
- https://launchpad.net/bugs/1673569
- RHSA-2017:1508 vendor-advisory