Red Hat Security Advisory: fence-agents security and bug fix update

Fixed packages 134

Vulnerabilities 1

• Medium 5.7
  CVE-2022-36087

  OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI

  OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions…

  oauthlib oauthlib python-oauthlib oauthlib Debian Ubuntu PyPI
  Sep 9, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2111998
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2121546
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2128425
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2132008
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2134015
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2138823
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2144531
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2149655
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2160480
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2161.json
• report
  https://access.redhat.com/security/cve/CVE-2022-36087
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-36087
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-36087
• article
  https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3pgj-pg6c-r5p7