SUSE-SU-2026:24189-1

SUSE-SU-2026:24189-1 · Security update for python-oauthlib

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527).

Fix available

Published: 2026-10-14T16:08:36Z
Updated: 2026-10-20T17:23:59.237249335Z

Stack: system

Affected products and versions

python-oauthlib SUSE:Linux Micro 6.2
Affected ranges
- ECOSYSTEM: < 3.2.2-160000.3.1
Update to 3.2.2-160000.3.1

Original sources

https://www.suse.com/support/update/announcement/2026/suse-su-202624189-1/
https://bugzilla.suse.com/1283526
https://bugzilla.suse.com/1283527
https://www.suse.com/security/cve/CVE-2026-49264
https://www.suse.com/security/cve/CVE-2026-49265
https://osv.dev/vulnerability/SUSE-SU-2026:24189-1

Check your server →

SUSE-SU-2026:24189-1 · Security update for python-oauthlib

Affected products and versions

python-oauthlib SUSE:Linux Micro 6.2

Original sources