--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2025-d8034c0356
2025-01-15 00:31:10.710313+00:00
--------------------------------------------------------------------------------

Name        : perl-Net-OAuth
Product     : Fedora EPEL 10.0
Version     : 0.30
Release     : 1.el10_0
URL         : https://metacpan.org/release/Net-OAuth
Summary     : OAuth protocol support library for Perl
Description :
Perl implementation of OAuth, an open protocol to allow secure API
authentication in a simple and standard method from desktop and web
applications. In practical terms, a mechanism for a Consumer to request
protected resources from a Service Provider on behalf of a user.

--------------------------------------------------------------------------------
Update Information:

Update to 0.30, fixes CVE-2025-22376
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jan  3 2025 Xavier Bachelot <xac...@bachelot.org> -  0.30-1
- Update to 0.30 (RHBZ#2335403)
  - fix CVE-2025-22376 (RHBZ#2335499,2335500,2335501)
- Specify all dependencies
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2335499 - CVE-2025-22376 perl-Net-OAuth: Default nonce for 
Net::OAuth package for perl is not cryptographically strong [fedora-41]
        https://bugzilla.redhat.com/show_bug.cgi?id=2335499
  [ 2 ] Bug #2335500 - CVE-2025-22376 perl-Net-OAuth: Default nonce for 
Net::OAuth package for perl is not cryptographically strong [fedora-40]
        https://bugzilla.redhat.com/show_bug.cgi?id=2335500
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update perl-Net-OAuth' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
epel-package-announce mailing list -- 
epel-package-announce@lists.fedoraproject.org
To unsubscribe send an email to 
epel-package-announce-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/epel-package-announce@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to