Bug#1019710: python-oauthlib: CVE-2022-36087: DoS when attacker provide malicious IPV6 URI

2022-09-14 Thread Salvatore Bonaccorso
Hi Daniele, On Wed, Sep 14, 2022 at 10:37:08AM +0200, Daniele Tricoli wrote: > Hello Salvatore, > many thanks for the report! > > On 13/09/2022 22:14, Salvatore Bonaccorso wrote: > > Source: python-oauthlib > > Version: 3.2.0-1 > > Severity: important > > Tags: security upstream > >

Bug#1019710: python-oauthlib: CVE-2022-36087: DoS when attacker provide malicious IPV6 URI

2022-09-14 Thread Daniele Tricoli
Hello Salvatore, many thanks for the report! On 13/09/2022 22:14, Salvatore Bonaccorso wrote: Source: python-oauthlib Version: 3.2.0-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for

Bug#1019710: python-oauthlib: CVE-2022-36087: DoS when attacker provide malicious IPV6 URI

2022-09-13 Thread Salvatore Bonaccorso
Source: python-oauthlib Version: 3.2.0-1 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for python-oauthlib. CVE-2022-36087[0]: | OAuthLib is an implementation of the OAuth request-signing logic