92 matches found
CVE-2026-72888
A flaw was found in Net::OAuth for Perl. A remote attacker can exploit an unbounded caching mechanism in the smartrequire function to cause memory exhaustion. This occurs because the smartrequire function stores results, including failed module loads, in a process-global hash without any size lim...
[SECURITY] Fedora 45 Update: perl-Net-OAuth-0.33-2.fc45
Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...
Fedora 45 : perl-Net-OAuth (2026-27bab0e213)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-27bab0e213 advisory. Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non- constant-time comparison in verify. This update...
CVE-2026-72889
A flaw was found in Net::OAuth for Perl. A remote attacker can exploit this vulnerability by manipulating the signature algorithm used for verification. By specifying a weaker algorithm, such as HMAC-SHA1 or HMAC-SHA256, in the incoming message, the attacker can force the system to use a...
[SECURITY] Fedora 44 Update: perl-Net-OAuth-0.33-1.fc44
Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...
[SECURITY] Fedora 43 Update: perl-Net-OAuth-0.33-1.fc43
Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...
Fedora 43 : perl-Net-OAuth (2026-370bd8b5f0)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-370bd8b5f0 advisory. Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non- constant-time comparison in verify. This update...
Fedora 44 : perl-Net-OAuth (2026-e33554bf9f)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e33554bf9f advisory. Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non- constant-time comparison in verify. This update...
MGASA-2026-0365 Updated perl-Net-OAuth packages fix security vulnerabilities
Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire Net::OAuth versions before 0.3...
Updated perl-Net-OAuth packages fix security vulnerabilities
Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire Net::OAuth versions before 0.3...
Fedora 46 : perl-Net-OAuth (2026-96404091a4)
The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-96404091a4 advisory. Automatic update for perl-Net-OAuth-0.33-1.fc46. Changelog Thu Aug 27 2026 Xavier Bachelot - 0.33-1 - Update to 0.32 RHBZ2517683 - Fixes...
perl-Net-OAuth-0.330.0-1.1 on GA media (moderate)
perl-Net-OAuth-0.330.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11551-1 Rating: moderate Cross-References: CVE-2026-72887 CVE-2026-72888 CVE-2026-72889 CVE-2026-75589 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These a...
SUSE CVE-2026-72889
Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...
SUSE CVE-2026-75589
Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the message against the locally computed one with the eq operator, which returns as soon as the two...
CVE-2026-75589
A flaw was found in Net::OAuth. This vulnerability arises from a non-constant-time comparison used when verifying HMAC-SHA1, HMAC-SHA256, and PLAINTEXT signatures. A remote attacker could exploit this by timing the responses to submitted messages, allowing them to recover valid signatures or, in...
CVE-2026-75589
Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the message against the locally computed one with the eq operator, which returns as soon as the two...
CVE-2026-72889
Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...
CVE-2026-75589
Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the message against the locally computed one with the eq operator, which returns as soon as the two...
CVE-2026-72889
Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...
UBUNTU-CVE-2026-72889
Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...