Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02448-1

Опубликовано: 21 июл. 2025
Источник: suse-cvrf

Описание

Security update for python-oslo.utils

This update for python-oslo.utils fixes the following issues:

  • CVE-2022-0718: Fixed incorrect password masking in debug output. (bsc#1196454)

Список пакетов

SUSE Linux Enterprise Module for Public Cloud 15 SP3
python3-oslo.utils-4.1.1-150200.8.7.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4
python3-oslo.utils-4.1.1-150200.8.7.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5
python3-oslo.utils-4.1.1-150200.8.7.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6
python3-oslo.utils-4.1.1-150200.8.7.1
SUSE Linux Enterprise Module for Public Cloud 15 SP7
python3-oslo.utils-4.1.1-150200.8.7.1
openSUSE Leap 15.6
python-oslo.utils-doc-4.1.1-150200.8.7.1
python3-oslo.utils-4.1.1-150200.8.7.1

Ссылки

Описание

A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 15 SP3:python3-oslo.utils-4.1.1-150200.8.7.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4:python3-oslo.utils-4.1.1-150200.8.7.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5:python3-oslo.utils-4.1.1-150200.8.7.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6:python3-oslo.utils-4.1.1-150200.8.7.1
Ссылки