Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 41: Update on perl-Net-OAuth Security Issue - CVE-2025-22376

fedora
Calendar Grey January 15, 2025
Dist Fedora Esm H88
The recent Fedora patch for perl-Net-OAuth rectifies a significant nonce vulnerability and improves authentication mechanisms for APIs.
Update to 0.30, fixes CVE-2025-22376

Summary

Perl implementation of OAuth, an open protocol to allow secure API

authentication in a simple and standard method from desktop and web

applications. In practical terms, a mechanism for a Consumer to request

protected resources from a Service Provider on behalf of a user.

Update Information:

Update to 0.30, fixes CVE-2025-22376

Topics%20covered

Topics Covered

security advisory update Fedora software fix perl-Net-OAuth API authentication cryptographic nonce

Change Log

* Fri Jan 3 2025 Xavier Bachelot - 0.30-1 - Update to 0.30 (RHBZ#2335403) - fix CVE-2025-22376 (RHBZ#2335499,2335500,2335501) - Specify all dependencies * Tue Aug 6 2024 Miroslav Suchý - 0.28-35 - convert license to SPDX

References


[ 1 ] Bug #2335499 - CVE-2025-22376 perl-Net-OAuth: Default nonce for Net::OAuth package for perl is not cryptographically strong [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2335499 [ 2 ] Bug #2335500 - CVE-2025-22376 perl-Net-OAuth: Default nonce for Net::OAuth package for perl is not cryptographically strong [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2335500

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f0077db20c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: perl-Net-OAuth
Product: Fedora 41
Version: 0.30
Release: 1.fc41
URL: https://metacpan.org/dist/Net-OAuth
Summary: OAuth protocol support library for Perl

Topics%20covered

Topics Covered

security advisory update Fedora software fix perl-Net-OAuth API authentication cryptographic nonce

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here