OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-apcUpgrade fence-agents-rsaUpgrade fence-agents-heuristics-pingUpgrade fence-virtd-tcpUpgrade fence-agents-lparUpgrade fence-agents-mpathUpgrade fence-agents-cisco-mdsUpgrade fence-agents-kubevirtUpgrade fence-agents-ibm-powervsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ibmbladeUpgrade fence-agents-ibm-vpcUpgrade fence-agents-azure-armUpgrade fence-agents-wtiUpgrade fence-agents-ilo2Upgrade fence-agents-redfishUpgrade fence-agents-drac5Upgrade fence-virtd-serialUpgrade fence-agents-bladecenterUpgrade fence-agents-ilo-mpUpgrade fence-agents-virshUpgrade fence-agents-apc-snmpUpgrade fence-agents-allUpgrade fence-agents-commonUpgrade fence-agents-ipmilanUpgrade fence-agents-ifmibUpgrade fence-agents-sbdUpgrade fence-virtUpgrade fence-agents-aliyunUpgrade fence-agents-awsUpgrade fence-virtd-libvirtUpgrade fence-agents-gceUpgrade fence-agents-rhevmUpgrade fence-virtd-multicastUpgrade fence-agents-openstackUpgrade fence-agents-hpbladeUpgrade fence-virtdUpgrade ha-cloud-supportUpgrade fence-agents-zvmUpgrade fence-agents-brocadeUpgrade fence-agents-scsiUpgrade fence-agents-computeUpgrade fence-agents-intelmodularUpgrade fence-agents-ipduUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-emersonUpgrade fence-virtd-cpgUpgrade fence-agents-ilo-sshUpgrade fence-agents-eaton-snmpUpgrade fence-agents-epsUpgrade fence-agents-kdumpUpgrade fence-agents-rsbUpgrade fence-agents-vmware-restUpgrade fence-agents-vmware-soapUpgrade fence-agents-amt-ws | May 15, 2023 | Sep 9, 2022 |
| Centos_linux | — | Upgrade fence-agents-kdump-debuginfoUpgrade fence-agents-debuginfoUpgrade fence-agents-kubevirtUpgrade fence-agents-debugsourceUpgrade fence-agents-commonUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-ibm-powervsUpgrade fence-agents-virshUpgrade fence-agents-ibm-vpc | May 15, 2023 | Sep 9, 2022 |
| Debian | — | Upgrade python-oauthlib | Jul 30, 2024 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-oauthlib | Jan 6, 2023 | Sep 9, 2022 |
| Oracle_linux | — | Upgrade fence-virtd-libvirtUpgrade fence-agents-kubevirtUpgrade fence-virtd-tcpUpgrade fence-virtUpgrade fence-agents-virshUpgrade fence-agents-ibm-powervsUpgrade fence-agents-commonUpgrade fence-virtd-serialUpgrade fence-agents-computeUpgrade fence-agents-ibm-vpcUpgrade fence-virtdUpgrade fence-virtd-multicastUpgrade fence-virtd-cpg | May 17, 2023 | Sep 9, 2022 |
| Redhat_linux | — | Upgrade fence-agents-kubevirt-debuginfoUpgrade fence-virtd-serialUpgrade fence-virtd-multicast-debuginfoUpgrade fence-agents-redfishUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-drac5Upgrade fence-agents-epsUpgrade fence-virtd-libvirt-debuginfoUpgrade fence-virtd-serial-debuginfoUpgrade fence-agents-debugsourceUpgrade fence-agents-computeUpgrade fence-agents-lparUpgrade fence-agents-hpbladeUpgrade fence-virtd-cpg-debuginfoUpgrade fence-virtd-cpgUpgrade fence-agents-zvmUpgrade fence-agents-mpathUpgrade fence-agents-cisco-ucsUpgrade fence-virtd-tcp-debuginfoUpgrade fence-agents-ibm-vpcUpgrade fence-agents-rsbUpgrade fence-agents-vmware-restUpgrade fence-agents-ibm-powervsUpgrade fence-virtdUpgrade fence-agents-rsaUpgrade fence-virtd-tcpUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-wtiUpgrade fence-agents-awsUpgrade fence-agents-ilo2Upgrade fence-agents-apcUpgrade fence-agents-azure-armUpgrade fence-agents-vmware-soapUpgrade fence-agents-kdumpUpgrade ha-cloud-supportUpgrade fence-virtd-debuginfoUpgrade fence-agents-ilo-sshUpgrade fence-agents-virshUpgrade fence-agents-openstackUpgrade fence-agents-ifmibUpgrade fence-virtd-libvirtUpgrade fence-virtd-multicastUpgrade fence-virtUpgrade fence-agents-rhevmUpgrade fence-virt-debuginfoUpgrade fence-agents-sbdUpgrade fence-agents-scsiUpgrade fence-agents-ibmbladeUpgrade ha-cloud-support-debuginfoUpgrade fence-agents-allUpgrade fence-agents-kubevirtUpgrade fence-agents-ipmilanUpgrade fence-agents-emersonUpgrade fence-agents-amt-wsUpgrade fence-agents-cisco-mdsUpgrade fence-agents-intelmodularUpgrade fence-agents-gceUpgrade fence-agents-bladecenterUpgrade fence-agents-eaton-snmpUpgrade fence-agents-brocadeUpgrade fence-agents-commonUpgrade fence-agents-apc-snmpUpgrade fence-agents-debuginfoUpgrade fence-agents-ilo-mpUpgrade fence-agents-heuristics-pingUpgrade fence-agents-ipduUpgrade fence-agents-aliyun | May 15, 2023 | Sep 9, 2022 |
| Ubuntu | — | Upgrade python3-oauthlib | Sep 23, 2022 | Sep 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub