--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-05e642f1ef
2025-01-15 01:38:48.800216+00:00
--------------------------------------------------------------------------------

Name        : perl-Net-OAuth
Product     : Fedora 40
Version     : 0.30
Release     : 1.fc40
URL         : https://metacpan.org/release/Net-OAuth
Summary     : OAuth protocol support library for Perl
Description :
Perl implementation of OAuth, an open protocol to allow secure API
authentication in a simple and standard method from desktop and web
applications. In practical terms, a mechanism for a Consumer to request
protected resources from a Service Provider on behalf of a user.

--------------------------------------------------------------------------------
Update Information:

Update to 0.30, fixes CVE-2025-22376
--------------------------------------------------------------------------------
ChangeLog:

* Fri Jan  3 2025 Xavier Bachelot  -  0.30-1
- Update to 0.30 (RHBZ#2335403)
  - fix CVE-2025-22376 (RHBZ#2335499,2335500,2335501)
- Specify all dependencies
* Tue Aug  6 2024 Miroslav Suchý  - 0.28-35
- convert license to SPDX
* Fri Jul 19 2024 Fedora Release Engineering  - 0.28-34
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2335499 - CVE-2025-22376 perl-Net-OAuth: Default nonce for Net::OAuth package for perl is not cryptographically strong [fedora-41]
        https://bugzilla.redhat.com/show_bug.cgi?id=2335499
  [ 2 ] Bug #2335500 - CVE-2025-22376 perl-Net-OAuth: Default nonce for Net::OAuth package for perl is not cryptographically strong [fedora-40]
        https://bugzilla.redhat.com/show_bug.cgi?id=2335500
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-05e642f1ef' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------