tocsin

Debian/libnet-oauth-perl: high 7.5

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the me

Action: Upgrade libnet-oauth-perl to 0.33-1 or later.

Affected

introducedfixedlast affected
00.33-1-

Fixed versions

0.33-1

Sources

published · modified · JSON