Astra Linux – Vulnerability in python-oslo.utils

A flaw was discovered in python-oslo-utils. Due to improper parsing, passwords that contain double quotes " cause incorrect masking in debug logs, resulting in any part of the password after the double quote being displayed as plain text...

EUVD-2022-0189

Malicious code in bioql PyPI...

Security update for python-oslo.utils

This update for python-oslo.utils fixes the following issues: CVE-2022-0718: Fixed incorrect password masking in debug output. bsc1196454 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can r...

Linux Distros Unpatched Vulnerability : CVE-2022-0718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote in them cause incorrect masking in debug logs, causing any part of...

RHSA-2022:8873 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) security update

Bulletin has no description...

RHSA-2022:0993 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-oslo-utils) security update

Bulletin has no description...

SUSE CVE-2022-0718

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) (RHSA-2022:8873)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8873 advisory. The OpenStack Oslo Utility library. Security Fixes: incorrect password masking in debug output CVE-2022-0718 For more details about the security...

python-oslo-utils: incorrect password masking in debug output

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

Debian dla-3106 : python-oslo.utils - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3106 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3106-1 [email protected] https://www.debian.org/lts/security/...

cloudcix (>=0.2.136, <=0.2.144) potentially affected by CVE-2022-0718 via oslo-utils (3.35.0)

oslo-utils PYPI version 3.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudcix =0.2.136, =0.2.144 Source cves: CVE-2022-0718 Source advisory: OSV:GHSA-WMQQ-R32M-87C5...

keystonemiddleware (1.3.2), python-group-based-policy-client (>=0.9.4, <=0.9.9) +2 more potentially affected by CVE-2022-0718 via oslo-utils (1.4.1)

oslo-utils PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - keystonemiddleware 1.3.2 - python-group-based-policy-client =0.9.4, =0.9.9 - python-keystoneclient 1.1.1 - python-neutronclient 2.3.12 Sourc...

cloudmesh-client (>=4.3.2, <=4.4.0) potentially affected by CVE-2022-0718 via oslo-utils (3.15.0)

oslo-utils PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client =4.3.2, =4.4.0 Source cves: CVE-2022-0718 Source advisory: OSV:GHSA-WMQQ-R32M-87C5...

aodhclient (>=0.1.0, <=0.8.0), duplicity (>=2.2.4rc3, <=2.2.4) +19 more potentially affected by CVE-2022-0718 via oslo-utils (3.22.3)

oslo-utils PYPI version 3.22.3 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - aodhclient =0.1.0, =2.2.4rc3, =11.0.0, =1.0.0, =1.10.0, =0.2.0, =0.13.0, =0.1.0, =1.0.0, =1.3.0, =0.0.1, =0.19.0, =0.6.0, =0.7.0, =1.5.0,...

GHSA-WMQQ-R32M-87C5 python-oslo-utils has improper password parsing

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote " in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext...

debtcollector (>=0.3.0, <=0.4.0), keystonemiddleware (>=1.3.0, <=1.6.1) +14 more potentially affected by CVE-2022-0718 via oslo-utils (1.9.0)

oslo-utils PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - debtcollector =0.3.0, =1.3.0, =0.2.0, =0.1.0, =0.9.0, =0.0.1.dev357, =1.0.13, =0.16.1, =0.3.0, =0.4.1, =1.0.0, =1.0.22, =2.3.10, =2.21.0,...

keystonemiddleware (>=1.5.2, <=1.5.3), networking-ofagent (>=2015.1.5, <=2015.1.6) +15 more potentially affected by CVE-2022-0718 via oslo-utils (1.4.2)

oslo-utils PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - keystonemiddleware =1.5.2, =2015.1.5, =1.8.1, =1.0.14, =1.1.2, =0.14.3, =0.10.0, =0.5.0, =1.3.2, =0.5.8, =2.23.2, =2.23.3 and more Source...

monasca-agent (1.1.20), python-monascaclient (>=1.0.25, <=1.0.27) potentially affected by CVE-2022-0718 via oslo-utils (2.5.0)

oslo-utils PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - monasca-agent 1.1.20 - python-monascaclient =1.0.25, =1.0.27 Source cves: CVE-2022-0718 Source advisory: OSV:GHSA-WMQQ-R32M-87C5...

cloudmesh-client (4.2.6) potentially affected by CVE-2022-0718 via oslo-utils (3.10.0)

oslo-utils PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudmesh-client 4.2.6 Source cves: CVE-2022-0718 Source advisory: OSV:GHSA-WMQQ-R32M-87C5...

cloudview (>=0.2.0, <=0.2.12) potentially affected by CVE-2022-0718 via oslo-utils (3.41.0)

oslo-utils PYPI version 3.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on oslo-utils and may be impacted: - cloudview =0.2.0, =0.2.12 Source cves: CVE-2022-0718 Source advisory: OSV:GHSA-WMQQ-R32M-87C5...