CVE-2022-0718
Fixed in a distro release EPSS 2%
A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.
Products: openstack oslo.utils, redhat openshift_container_platform, redhat openstack_platform, debian_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | oslo-utils | 4.10.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | python-oslo.utils | 3.36.5-0+deb10u2 |
| Debian 11 | python-oslo.utils | 4.6.1-0+deb11u1 |
| Debian 12 | python-oslo.utils | 4.10.1-1 |
| Debian 13 | python-oslo.utils | 4.10.1-1 |
| Debian 14 | python-oslo.utils | 4.10.1-1 |
| Red Hat openstack 16.1 | python-oslo-utils | 0:3.41.6-1.20220426095230.f4deaad.el8ost |
| Red Hat openstack 16.1 | python-oslo-utils-lang | 0:3.41.6-1.20220426095230.f4deaad.el8ost |
| Red Hat openstack 16.1 | python3-oslo-utils | 0:3.41.6-1.20220426095230.f4deaad.el8ost |
| Red Hat openstack 16.2 | python-oslo-utils | 0:3.41.6-2.20220111011750.el8ost |
| Red Hat openstack 16.2 | python-oslo-utils-lang | 0:3.41.6-2.20220111011750.el8ost |
| Red Hat openstack 16.2 | python3-oslo-utils | 0:3.41.6-2.20220111011750.el8ost |
| SUSE Linux Enterprise Module for Public Cloud 15 SP3 | python-oslo.utils | 4.1.1-150200.8.7.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | python-oslo.utils | 4.1.1-150200.8.7.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | python-oslo.utils | 4.1.1-150200.8.7.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP6 | python-oslo.utils | 4.1.1-150200.8.7.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | python-oslo.utils | 4.1.1-150200.8.7.1 |
| Ubuntu 18.04 LTS | python-oslo.utils | 3.35.0-0ubuntu1.1 |
| Ubuntu 20.04 LTS | python-oslo.utils | 4.1.1-0ubuntu1.1 |
| Ubuntu Pro 16.04 LTS | python-oslo.utils | 3.8.0-2ubuntu0.1~esm1 |
| openSUSE Leap 15.6 | python-oslo.utils | 4.1.1-150200.8.7.1 |