An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenStack Platform 16.2 (python-oslo-utils) security update Advisory ID: RHSA-2022:0993-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2022:0993 Issue date: 2022-03-23 CVE Names: CVE-2022-0718 ==================================================================== 1. Summary: An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 16.2 - noarch 3. Description: The OpenStack Oslo Utility library. Security Fix(es): * incorrect password masking in debug output (CVE-2022-0718) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2056850 - CVE-2022-0718 python-oslo-utils: incorrect password masking in debug output 6. Package List: Red Hat OpenStack Platform16.2: Source: python-oslo-utils-3.41.6-2.20220111011750.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-2.20220111011750.el8ost.noarch.rpm python3-oslo-utils-3.41.6-2.20220111011750.el8ost.noarch.rpm Red Hat OpenStack Platform 16.2: Source: python-oslo-utils-3.41.6-2.20220111011750.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-2.20220111011750.el8ost.noarch.rpm python3-oslo-utils-3.41.6-2.20220111011750.el8ost.noarch.rpm Red Hat OpenStack Platform 16.2: Source: python-oslo-utils-3.41.6-2.20220111011750.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-2.20220111011750.el8ost.noarch.rpm python3-oslo-utils-3.41.6-2.20220111011750.el8ost.noarch.rpm Red Hat OpenStack Platform 16.2: Source: python-oslo-utils-3.41.6-2.20220111011750.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-2.20220111011750.el8ost.noarch.rpm python3-oslo-utils-3.41.6-2.20220111011750.el8ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2022-0718 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYjvl1tzjgjWX9erEAQioJQ//UOqZq55lFjhV575NCaDD92Di5RZTBCea ZIiAdyCVNVLANX1G7EOdTAkHlnpjr+EQPalQ+vO0C8ovyAt/EI2niBbdtKy0glEO KK3iOvSzOyzM91FOxx3z2y+IzYP0A8+jbw5jwNLXuwv2wh9XfcHqut/1niKkvPpd /emdm33eqRvkFVHSwHKB6kdqkiK5DlEz5dSY3xeadzvCMP+5DBDQrYwT4//WAE6O Vg3hSz4v0zs5dZ8HXxgkaqUWB2yKD0NBz3vmOjG6A3Wv3SnJujhu6E7UJUfH47ze HQoT5BG3rXOgztMsI6GLhLrzv683bWTuKIndMLrQ78FIP93PmPqlr1FRIyYuqCLZ qmF3dBwyyTyh937O9YxurnMzCa8K6TaZq+FxvL59POtZ+DF/W8/sa7Nm7LlKK/ww 8Fcd2D7JWmb4+1001TYFM7oAQ0upbQkBbPDftFudo6fkpl6CIFt2oOzycS8jOuOT 5A1/RIF+huHCcxniu9nSTeGlgmiVt0uPWfJLOsCPaNEhUYTpiVa5SkZDFgg0FwiR HX5NayfyBSz72Ofra/T+xCU1XSjkUKTjWzrHlvIfNZ7VsfgLE3+9uiFh5lGVFvwS MC9h/WqD8snpSjg3WqFXyJL7ClqZSGgTy8LGI8MYDmSBxKSPGHZZatKcOkBze6aW rTfv2sg6NAk=vdVy -----END PGP SIGNATURE----- -- RHSA-announce mailing list
work around some possible crashers - - ensure we do not end up with invalid values for debug output - switch to fork of bobwya. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-94f8ac45bb 2016-05-07 11:36:53.855277 -------------------------------------------------------------------------------- Name : i7z Product : Fedora 24 Version : 0.27.2 Release : 16.20150629gitec09c4f.fc24 URL : https://github.com/bobwya/i7z Summary : CLI curses based monitoring tool for Intel Core i7 processorsDescription : i7z is a CLI curses based monitoring tool for Intel Core i7, i5 and i3 processors. -------------------------------------------------------------------------------- Update Information: work around some possible crashers - - ensure we do not end up with invalid values for debug output - switch to fork of bobwya -------------------------------------------------------------------------------- References: [ 1 ] Bug #1319432 - [abrt] i7z-gui: Print_Information_Processor(): i7z_GUI killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1319432 [ 2 ] Bug #1243639 - Push version to newer upstream https://bugzilla.redhat.com/show_bug.cgi?id=1243639 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update i7z' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
work around some possible crashers - - ensure we do not end up with invalid values for debug output - switch to fork of bobwya. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-fcfe4c73b0 2016-04-28 17:38:59.871520 -------------------------------------------------------------------------------- Name : i7z Product : Fedora 23 Version : 0.27.2 Release : 16.20150629gitec09c4f.fc23 URL : https://github.com/bobwya/i7z Summary : CLI curses based monitoring tool for Intel Core i7 processorsDescription : i7z is a CLI curses based monitoring tool for Intel Core i7, i5 and i3 processors. -------------------------------------------------------------------------------- Update Information: work around some possible crashers - - ensure we do not end up with invalid values for debug output - switch to fork of bobwya -------------------------------------------------------------------------------- References: [ 1 ] Bug #1319432 - [abrt] i7z-gui: Print_Information_Processor(): i7z_GUI killed by SIGSEGV https://bugzilla.redhat.com/show_bug.cgi?id=1319432 [ 2 ] Bug #1243639 - Push version to newer upstream https://bugzilla.redhat.com/show_bug.cgi?id=1243639 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update i7z' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Get the latest Linux and open source security news straight to your inbox.