An update that solves one vulnerability can now be installed.. # Security update for python-oslo.utils Announcement ID: SUSE-SU-2025:02448-1 Release Date: 2025-07-21T14:46:27Z Rating: moderate References: * bsc#1196454 Cross-References: * CVE-2022-0718 CVSS scores: * CVE-2022-0718 ( SUSE ): 6.0 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L * CVE-2022-0718 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.6 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-oslo.utils fixes the following issues: * CVE-2022-0718: Fixed incorrect password masking in debug output. (bsc#1196454) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patchopenSUSE-SLE-15.6-2025-2448=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2025-2448=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-2448=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2025-2448=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-2448=1 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2025-2448=1 ## Package List: * openSUSE Leap 15.6 (noarch) * python3-oslo.utils-4.1.1-150200.8.7.1 * python-oslo.utils-doc-4.1.1-150200.8.7.1 * Public Cloud Module 15-SP3 (noarch) * python3-oslo.utils-4.1.1-150200.8.7.1 * Public Cloud Module 15-SP4 (noarch) * python3-oslo.utils-4.1.1-150200.8.7.1 * Public Cloud Module 15-SP5 (noarch) * python3-oslo.utils-4.1.1-150200.8.7.1 * Public Cloud Module 15-SP6 (noarch) * python3-oslo.utils-4.1.1-150200.8.7.1 * Public Cloud Module 15-SP7 (noarch) * python3-oslo.utils-4.1.1-150200.8.7.1 ## References: * https://www.suse.com/security/cve/CVE-2022-0718.html * https://bugzilla.suse.com/show_bug.cgi?id=1196454 . This notification outlines a security concern involving python-oslo.utils in openSUSE, emphasizing a vulnerability rated with moderate severity.. openSUSE, python-oslo.utils, security patch, CVE-2022-0718. . LinuxSecurity.com Team
An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) security update Advisory ID: RHSA-2022:8873-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2022:8873 Issue date: 2022-12-07 CVE Names: CVE-2022-0718 ==================================================================== 1. Summary: An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 16.1 - noarch 3. Description: The OpenStack Oslo Utility library. Security Fix(es): * incorrect password masking in debug output (CVE-2022-0718) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2056850 - CVE-2022-0718 python-oslo-utils: incorrect password masking in debug output 6. Package List: Red Hat OpenStack Platform16.1: Source: python-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm python3-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm Red Hat OpenStack Platform 16.1: Source: python-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm python3-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm Red Hat OpenStack Platform 16.1: Source: python-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm python3-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-0718 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY5FpmtzjgjWX9erEAQgS3Q//RqYOosziJEn6E8s0Vk7RSiHHbDGrdAYy CeJjTvb/4rGYW91Mr6zhuRkAgmjVOPHHcNAx18fBmig8W0yb4phF21I5IbaOezjv mp4r9MD7XKxtu1SPbwscIyne0HTzMKH1rtTQXRPgXxARefrANNIdsdBrH/u1c1Uo hL5G/ohmfu9hNWSV/2vAqKZMneIQOLWVeogmS2lVyynHwUZDluJSDbP52r7DcJ/Q vcyqhuzbRUBODv3s361v8TmZ1KAsypbxfs30jXRgthMx0Pz43IZ9XvoGFEhvyGSx lWllxT47flsDOuUulCqCvRe8TcTFRvzOQ6f6Y+YcxJZDuR3SfdjQbizySaNlglSq NNY8Y6AqEmZj9CGx4FkZ+OLp8IZ2D6dNRF04ILiMPoKkYS/hGe/qSU0krJ+uS9UF yF97rSZe7TduSVu5erE/sXVQiAHqUt/Nz/LCuRe+f8MclHaHx8KHTEs6x4fluIvD PlRseR2oN7ePWiTBgbQ3XMPh6wNhKsm0y1oaNK7E2dUo2qa8aQO2ziqNMZPrOJsv O6jc5OZes6R4XvoXCqmVPURMOdmeQJ16V7Fp1QDUWVNLvZupQFxy/RwmYPkLV4Fv 0Ywg6QbxNHPnLBsBlW+0TeTsgLCYxICrSbUNp3duWplCWcBqKZOoXtMFfzJrD3PS 5Jyxu/2yRRY=qIcJ -----END PGP SIGNATURE----- -- RHSA-announce mailinglist
An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenStack Platform 16.2 (python-oslo-utils) security update Advisory ID: RHSA-2022:0993-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2022:0993 Issue date: 2022-03-23 CVE Names: CVE-2022-0718 ==================================================================== 1. Summary: An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 16.2 - noarch 3. Description: The OpenStack Oslo Utility library. Security Fix(es): * incorrect password masking in debug output (CVE-2022-0718) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2056850 - CVE-2022-0718 python-oslo-utils: incorrect password masking in debug output 6. Package List: Red Hat OpenStack Platform16.2: Source: python-oslo-utils-3.41.6-2.20220111011750.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-2.20220111011750.el8ost.noarch.rpm python3-oslo-utils-3.41.6-2.20220111011750.el8ost.noarch.rpm Red Hat OpenStack Platform 16.2: Source: python-oslo-utils-3.41.6-2.20220111011750.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-2.20220111011750.el8ost.noarch.rpm python3-oslo-utils-3.41.6-2.20220111011750.el8ost.noarch.rpm Red Hat OpenStack Platform 16.2: Source: python-oslo-utils-3.41.6-2.20220111011750.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-2.20220111011750.el8ost.noarch.rpm python3-oslo-utils-3.41.6-2.20220111011750.el8ost.noarch.rpm Red Hat OpenStack Platform 16.2: Source: python-oslo-utils-3.41.6-2.20220111011750.el8ost.src.rpm noarch: python-oslo-utils-lang-3.41.6-2.20220111011750.el8ost.noarch.rpm python3-oslo-utils-3.41.6-2.20220111011750.el8ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2022-0718 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYjvl1tzjgjWX9erEAQioJQ//UOqZq55lFjhV575NCaDD92Di5RZTBCea ZIiAdyCVNVLANX1G7EOdTAkHlnpjr+EQPalQ+vO0C8ovyAt/EI2niBbdtKy0glEO KK3iOvSzOyzM91FOxx3z2y+IzYP0A8+jbw5jwNLXuwv2wh9XfcHqut/1niKkvPpd /emdm33eqRvkFVHSwHKB6kdqkiK5DlEz5dSY3xeadzvCMP+5DBDQrYwT4//WAE6O Vg3hSz4v0zs5dZ8HXxgkaqUWB2yKD0NBz3vmOjG6A3Wv3SnJujhu6E7UJUfH47ze HQoT5BG3rXOgztMsI6GLhLrzv683bWTuKIndMLrQ78FIP93PmPqlr1FRIyYuqCLZ qmF3dBwyyTyh937O9YxurnMzCa8K6TaZq+FxvL59POtZ+DF/W8/sa7Nm7LlKK/ww 8Fcd2D7JWmb4+1001TYFM7oAQ0upbQkBbPDftFudo6fkpl6CIFt2oOzycS8jOuOT 5A1/RIF+huHCcxniu9nSTeGlgmiVt0uPWfJLOsCPaNEhUYTpiVa5SkZDFgg0FwiR HX5NayfyBSz72Ofra/T+xCU1XSjkUKTjWzrHlvIfNZ7VsfgLE3+9uiFh5lGVFvwS MC9h/WqD8snpSjg3WqFXyJL7ClqZSGgTy8LGI8MYDmSBxKSPGHZZatKcOkBze6aW rTfv2sg6NAk=vdVy -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Get the latest Linux and open source security news straight to your inbox.