--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-10520
2009-10-15 22:02:48
--------------------------------------------------------------------------------

Name        : perl-Net-OAuth
Product     : Fedora 10
Version     : 0.19
Release     : 1.fc10
URL         : https://metacpan.org/dist/Net-OAuth
Summary     : OAuth protocol support library for Perl
Description :
Perl implementation of OAuth, an open protocol to allow secure API
authentication in a simple and standard method from desktop and web
applications. In practical terms, a mechanism for a Consumer to request
protected resources from a Service Provider on behalf of a user.

--------------------------------------------------------------------------------
Update Information:

A session fixation vulnerability was discovered in OAuth protocol 1.0. Perl
OAuth bindings were updated to support the new version of the OAauth protocol
that was issued to address the vulnerability.    All OAuth users are strongly
advised to update to this updated package and protocol version 1.0a which fixes
the vulnerability.    Upstream advisory: https://oauth.net/advisories/2009-1/
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #528608 - current perl-Net-OAuth does not support OAuth 1.0a
        https://bugzilla.redhat.com/show_bug.cgi?id=528608
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update perl-Net-OAuth' at the command line.
For more information, refer to "Managing Software with yum",
available at .

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------

_______________________________________________
Fedora-package-announce mailing list
Fedora-package-announce@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-package-announce

Fedora 10 Update: perl-Net-OAuth-0.19-1.fc10

October 15, 2009
A session fixation vulnerability was discovered in OAuth protocol 1.0

Summary

Perl implementation of OAuth, an open protocol to allow secure API

authentication in a simple and standard method from desktop and web

applications. In practical terms, a mechanism for a Consumer to request

protected resources from a Service Provider on behalf of a user.

Update Information:

A session fixation vulnerability was discovered in OAuth protocol 1.0. Perl OAuth bindings were updated to support the new version of the OAauth protocol that was issued to address the vulnerability. All OAuth users are strongly advised to update to this updated package and protocol version 1.0a which fixes the vulnerability. Upstream advisory: https://oauth.net/advisories/2009-1/

Change Log

References

[ 1 ] Bug #528608 - current perl-Net-OAuth does not support OAuth 1.0a https://bugzilla.redhat.com/show_bug.cgi?id=528608

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update perl-Net-OAuth' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
Name : perl-Net-OAuth
Product : Fedora 10
Version : 0.19
Release : 1.fc10
URL : https://metacpan.org/dist/Net-OAuth
Summary : OAuth protocol support library for Perl

Related News

4.Lock AbstractDigital Esm H320
1 - 2 min read
Nmap 7.95 introduces myriad enhancements, primarily focusing on OS and service detection signatures. This reflects the dedication of the Nmap
5.ShakingHands Esm H320
3 - 5 min read
There has been a promising shift in the tech industry, with major companies pledging to release products with built-in security features. This
18.WifiCutout Landscape Esm H320
2 - 3 min read
A novel attack called TunnelVision has been discovered. It compromises the security of virtually all VPN apps, rendering their purpose useless. The
21.Globe RadiatingCode Esm H320
2 - 3 min read
The recent discovery of a backdoor in XZ Utils , a widely used Linux tool, raises concerns about the security of the open-source ecosystem. While
13.Lock StylizedMotherboard Esm H320
1 - 2 min read
Spiral Linux is a Debian-based distribution that offers a range of desktop environments, making it stand out from other Linux distributions. In
32.Lock Code Circular Esm H320
2 - 3 min read
Two critical security vulnerabilities were found in pgAdmin, the open-source administration tool for PostgreSQL . The vulnerabilities assigned
1.Penguin Landscape Esm H320
2 - 3 min read
The recent release of AlmaLinux 9.4 , closely aligned with Red Hat Enterprise Linux (RHEL) 9.4 , presents Linux admins and infosec professionals
11.Locks IsometricPattern Esm H320
2 - 3 min read
The upcoming release of Linux Mint 22 will introduce significant changes, particularly in handling XApp , GNOME applications, and the Software

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved