{"id":34534,"date":"2022-12-08T20:18:46","date_gmt":"2022-12-08T17:18:46","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/170157\/RHSA-2022-8873-01.txt"},"modified":"2022-12-11T10:12:19","modified_gmt":"2022-12-11T06:42:19","slug":"red-hat-security-advisory-2022-8873-01-openstack","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/red-hat-security-advisory-2022-8873-01-openstack\/","title":{"rendered":"Red Hat Security Advisory 2022-8873-01 OpenStack"},"content":{"rendered":"<p dir=\"ltr\">&#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211;<br \/>\nHash: SHA256<\/p>\n<p dir=\"ltr\">====================================================================<br \/>\nRed Hat Security Advisory<\/p>\n<p dir=\"ltr\">Synopsis: Moderate: Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) security update<br \/>\nAdvisory ID: RHSA-2022:8873-01<br \/>\nProduct: Red Hat OpenStack Platform<br \/>\nAdvisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:8873<br \/>\nIssue date: 2022-12-07<br \/>\nCVE Names: CVE-2022-0718<br \/>\n====================================================================<br \/>\n1. Summary:<\/p>\n<p dir=\"ltr\">An update for python-oslo-utils is now available for Red Hat OpenStack<br \/>\nPlatform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2.<\/p>\n<p dir=\"ltr\">Red Hat Product Security has rated this update as having a security impact<br \/>\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which<br \/>\ngives a detailed severity rating, is available for each vulnerability from<br \/>\nthe CVE link(s) in the References section.<\/p>\n<p dir=\"ltr\">2. Relevant releases\/architectures:<\/p>\n<p dir=\"ltr\">Red Hat OpenStack Platform 16.1 &#8211; noarch<\/p>\n<p dir=\"ltr\">3. Description:<\/p>\n<p dir=\"ltr\">The OpenStack Oslo Utility library.<\/p>\n<p dir=\"ltr\">Security Fix(es):<\/p>\n<p dir=\"ltr\">* incorrect password masking in debug output (CVE-2022-0718)<\/p>\n<p dir=\"ltr\">For more details about the security issue(s), including the impact, a CVSS<br \/>\nscore, acknowledgments, and other related information, refer to the CVE<br \/>\npage listed in the References section.<\/p>\n<p dir=\"ltr\">4. Solution:<\/p>\n<p dir=\"ltr\">For details on how to apply this update, which includes the changes<br \/>\ndescribed in this advisory, refer to:<\/p>\n<p dir=\"ltr\">https:\/\/access.redhat.com\/articles\/11258<\/p>\n<p dir=\"ltr\">5. Bugs fixed (https:\/\/bugzilla.redhat.com\/):<\/p>\n<p dir=\"ltr\">2056850 &#8211; CVE-2022-0718 python-oslo-utils: incorrect password masking in debug output<\/p>\n<p dir=\"ltr\">6. Package List:<\/p>\n<p dir=\"ltr\">Red Hat OpenStack Platform 16.1:<\/p>\n<p dir=\"ltr\">Source:<br \/>\npython-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.src.rpm<\/p>\n<p dir=\"ltr\">noarch:<br \/>\npython-oslo-utils-lang-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm<br \/>\npython3-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm<\/p>\n<p dir=\"ltr\">Red Hat OpenStack Platform 16.1:<\/p>\n<p dir=\"ltr\">Source:<br \/>\npython-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.src.rpm<\/p>\n<p dir=\"ltr\">noarch:<br \/>\npython-oslo-utils-lang-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm<br \/>\npython3-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm<\/p>\n<p dir=\"ltr\">Red Hat OpenStack Platform 16.1:<\/p>\n<p dir=\"ltr\">Source:<br \/>\npython-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.src.rpm<\/p>\n<p dir=\"ltr\">noarch:<br \/>\npython-oslo-utils-lang-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm<br \/>\npython3-oslo-utils-3.41.6-1.20220426095230.f4deaad.el8ost.noarch.rpm<\/p>\n<p dir=\"ltr\">These packages are GPG signed by Red Hat for security. Our key and<br \/>\ndetails on how to verify the signature are available from<br \/>\nhttps:\/\/access.redhat.com\/security\/team\/key\/<\/p>\n<p dir=\"ltr\">7. References:<\/p>\n<p dir=\"ltr\">https:\/\/access.redhat.com\/security\/cve\/CVE-2022-0718<br \/>\nhttps:\/\/access.redhat.com\/security\/updates\/classification\/#moderate<\/p>\n<p dir=\"ltr\">8. Contact:<\/p>\n<p dir=\"ltr\">The Red Hat security contact is &lt;secalert@redhat.com&gt;. More contact<br \/>\ndetails at https:\/\/access.redhat.com\/security\/team\/contact\/<\/p>\n<p dir=\"ltr\">Copyright 2022 Red Hat, Inc.<br \/>\n&#8212;&#8211;BEGIN PGP SIGNATURE&#8212;&#8211;<br \/>\nVersion: GnuPG v1<\/p>\n<p dir=\"ltr\">iQIVAwUBY5FpmtzjgjWX9erEAQgS3Q\/\/RqYOosziJEn6E8s0Vk7RSiHHbDGrdAYy<br \/>\nCeJjTvb\/4rGYW91Mr6zhuRkAgmjVOPHHcNAx18fBmig8W0yb4phF21I5IbaOezjv<br \/>\nmp4r9MD7XKxtu1SPbwscIyne0HTzMKH1rtTQXRPgXxARefrANNIdsdBrH\/u1c1Uo<br \/>\nhL5G\/ohmfu9hNWSV\/2vAqKZMneIQOLWVeogmS2lVyynHwUZDluJSDbP52r7DcJ\/Q<br \/>\nvcyqhuzbRUBODv3s361v8TmZ1KAsypbxfs30jXRgthMx0Pz43IZ9XvoGFEhvyGSx<br \/>\nlWllxT47flsDOuUulCqCvRe8TcTFRvzOQ6f6Y+YcxJZDuR3SfdjQbizySaNlglSq<br \/>\nNNY8Y6AqEmZj9CGx4FkZ+OLp8IZ2D6dNRF04ILiMPoKkYS\/hGe\/qSU0krJ+uS9UF<br \/>\nyF97rSZe7TduSVu5erE\/sXVQiAHqUt\/Nz\/LCuRe+f8MclHaHx8KHTEs6x4fluIvD<br \/>\nPlRseR2oN7ePWiTBgbQ3XMPh6wNhKsm0y1oaNK7E2dUo2qa8aQO2ziqNMZPrOJsv<br \/>\nO6jc5OZes6R4XvoXCqmVPURMOdmeQJ16V7Fp1QDUWVNLvZupQFxy\/RwmYPkLV4Fv<br \/>\n0Ywg6QbxNHPnLBsBlW+0TeTsgLCYxICrSbUNp3duWplCWcBqKZOoXtMFfzJrD3PS<br \/>\n5Jyxu\/2yRRY=qIcJ<br \/>\n&#8212;&#8211;END PGP SIGNATURE&#8212;&#8211;<br \/>\n&#8212;<br \/>\nRHSA-announce mailing list<br \/>\nRHSA-announce@redhat.com<br \/>\nhttps:\/\/listman.redhat.com\/mailman\/listinfo\/rhsa-announce<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211; Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) security update Advisory ID: RHSA-2022:8873-01 Product: Red Hat OpenStack Platform Advisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:8873 Issue date: 2022-12-07 CVE Names: CVE-2022-0718 ==================================================================== 1. Summary: An update for python-oslo-utils is now available for Red Hat OpenStack Platform 16.1.9 (Train) &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-34534","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34534","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=34534"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34534\/revisions"}],"predecessor-version":[{"id":34685,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34534\/revisions\/34685"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=34534"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=34534"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=34534"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}