Back Linuxsecurity

Fedora 44 perl-Net-OAuth Important Timing Attack Fix 2026

Linuxsecurity •LinuxSecurity Advisories • September 8, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

Perl implementation of OAuth, an open protocol to allow secure API

authentication in a simple and standard method from desktop and web

applications. In practical terms, a mechanism for a Consumer to request

protected resources from a Service Provider on behalf of a user.

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. This update fixes the issue.

* Thu Aug 27 2026 Xavier Bachelot - 0.33-1 - Update to 0.33 (RHBZ#2517683) - Fixes CVE-2026-72889 (RHBZ#2519409)

[ 1 ] Bug #2519561 - CVE-2026-75589 perl-Net-OAuth: Net::OAuth: Information disclosure via timing attack in signature verification [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-e33554bf9f' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Timing Attack Fix for Fedora's perl-Net-OAuth Fedora has released important updates for the perl-Net-OAuth package to address a critical timing attack vulnerability. Versions prior to 0.33 are affected, allowing attackers to exploit non-constant-time comparisons in signature verification, leading to potential information disclosure. The vulnerability is identified as CVE-2026-75589, published on August 19, 2026. The update, which fixes this issue, was made available on August 27, 2026. Users are advised to upgrade to version 0.33 to mitigate the risk. The flaw impacts all Fedora systems using the affected versions of the Net::OAuth module. The updates can be installed via the 'dnf' package manager. Security professionals should prioritize patching to prevent potential exploitation. 2 sources 46

Extracted Entities

Fedora 44 perl-Net-OAuth Important Timing Attack Fix 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)

CWE Weaknesses (1)

Platforms (1)