Oracle Linux 9 : fence-agents (ELSA-2023-2161)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2161 advisory. 4.10.0-43 - fencevmwaresoap: set logintimeout lower than default pcmkmonitortimeout 20s to remove tmp dirs Resolves: rhbz2122944 4.10.0-42 - fencing/fencewti: a...

fence-agents security and bug fix update

4.10.0-43 - fencevmwaresoap: set logintimeout lower than default pcmkmonitortimeout 20s to remove tmp dirs Resolves: rhbz2122944 4.10.0-42 - fencing/fencewti: add --plug-separator to be able to avoid characters that are in node names Resolves: rhbz2152107 4.10.0-41 - fencescsi: skip key generatio...

AlmaLinux 9 : fence-agents (ALSA-2023:2161)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:2161 advisory. - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirec...

python-oauthlib: DoS when attacker provides malicious IPV6 URI

A flaw was found in python-oauthlib. This flaw allows an attacker providing a malicious redirect URI to cause a denial of service to OAuthLib's web application...

Security Bulletin: OAuthlib is vulnerable to CVE-2022-36087 used in IBM Maximo Application Suite

Summary IBM Maximo Application Suite uses OAuthlib which is vulnerable to CVE-2022-36087. Vulnerability Details CVEID:CVE-2022-36087 DESCRIPTION: OAuthlib is vulnerable to a denial of service, caused by improper input validation. By sending a specially-crafted request using IPV6 URI, a remote...

Huawei EulerOS: Security Advisory for python-oauthlib (EulerOS-SA-2023-1020)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-oauthlib (EulerOS-SA-2023-1045)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : python-oauthlib (EulerOS-SA-2023-1020)

According to the versions of the python-oauthlib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker...

EulerOS 2.0 SP11 : python-oauthlib (EulerOS-SA-2023-1045)

According to the versions of the python-oauthlib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker...

Security Bulletin: Vulnerability in OAuthlib affects IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift (CVE-2022-36087)

Summary Denial of service vulnerability in OAuthlib may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift. Vulnerability Details CVEID:CVE-2022-36087 DESCRIPTION: OAuthlib is vulnerable to a denial of service, caused by improper input validation. By sendin...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in OAuthLib

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of OAuthLib. Vulnerability Details CVEID:CVE-2022-36087 DESCRIPTION: OAuthlib is vulnerable to a denial of service, caused by improper input validation. By sending a specially-crafted request using IPV6 URI, a...

[SECURITY] Fedora 37 Update: python-oauthlib-3.2.1-1.fc37

OAuthLib is a generic utility which implements the logic of OAuth without assuming a specific HTTP request object or web framework. Use it to graft OAuth client support onto your favorite HTTP library, or provider support onto your favourite web framework. If you're a maintainer of such a library...

Fedora: Security Advisory for python-oauthlib (FEDORA-2022-5a74a5eea7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

USN-5632-1: OAuthLib vulnerability

Sebastian Chnelik discovered that OAuthLib incorrectly handled certain redirect uris. A remote attacker could possibly use this issue to cause OAuthLib to crash, resulting in a denial of service...

Ubuntu 22.04 LTS : OAuthLib vulnerability (USN-5632-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5632-1 advisory. Sebastian Chnelik discovered that OAuthLib incorrectly handled certain redirect uris. A remote attacker could possibly use this issue to cause OAuthLib to crash,...

CVE-2022-36087

A flaw was found in python-oauthlib. This flaw allows an attacker providing a malicious redirect URI to cause a denial of service to OAuthLib's web application. Mitigation The redirecturi can be verified in the web toolkit before OAuthLib is called. Check to see if : is present to reject the...

annalist (=0.5.18), anoteai (>=0.10.0 <=0.20.0) +118 more potentially affected by CVE-2022-36087 via oauthlib (>=3.1.1 <=3.2.1)

oauthlib PYPI version =3.1.1, =0.10.0, =1.1.89, =4.0.1, =0.2.1, =0.7.11, =0.2.11, =1.0.0, =1.1.71, =1.2.0, =0.3.7, =1.0.28, =0.3.0, =0.0.5, =0.0.33, =0.0.35 and more Source cves: CVE-2022-36087 Source advisory: OSV:GHSA-3PGJ-PG6C-R5P7...

GHSA-3PGJ-PG6C-R5P7 OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

Impact - Attacker providing malicious redirect uri can cause DoS to oauthlib's web application. - Attacker can also leverage usage of urivalidate functions depending where it is used. What kind of vulnerability is it? Who is impacted? Oauthlib applications using OAuth2.0 provider support or use...

OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

Impact - Attacker providing malicious redirect uri can cause DoS to oauthlib's web application. - Attacker can also leverage usage of urivalidate functions depending where it is used. What kind of vulnerability is it? Who is impacted? Oauthlib applications using OAuth2.0 provider support or use...

CVE-2022-36087

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of urivalidate functions depending where it is used. OAuthLib...