FEDORA-EPEL-2014-3236 — security update for python-oauth2

stable

python-oauth2-1.5.211-8.el7

FEDORA-EPEL-2014-3236 created by spot 11 years ago for Fedora EPEL 7

Actually apply patch to fix CVE-2013-4347 (thanks to Jason Green, Matt Wilson). Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski. Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski.

This update has been submitted for testing by spot.

11 years ago

This update is currently being pushed to the Fedora EPEL 7 testing updates repository.

11 years ago

This update has been pushed to testing

11 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

11 years ago

This update has been submitted for stable by spot.

11 years ago

This update is currently being pushed to the Fedora EPEL 7 stable updates repository.

11 years ago

This update has been pushed to stable

11 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

11 years ago

in testing

11 years ago

in stable

11 years ago

Builds

python-oauth2-1.5.211-8.el7

BZ#1007746 CVE-2013-4346 python-oauth2: _check_signature() ignores the nonce value when validating signed urls

BZ#1007758 CVE-2013-4347 python-oauth2: Uses poor PRNG in nonce

BZ#1007766 python-oauth2: various flaws [fedora-all]

python-oauth2-1.5.211-8.el7

Automated Test Results

None