diff --git a/fence-agents.spec b/fence-agents.spec
index 6318340..08b10aa 100644
--- a/fence-agents.spec
+++ b/fence-agents.spec
@@ -8,6 +8,9 @@
 
 # bundles
 %global bundled_lib_dir    bundled
+# azure
+%global oauthlib		oauthlib
+%global oauthlib_version	3.2.2
 # kubevirt
 %global openshift		openshift
 %global openshift_version	0.12.1
@@ -49,8 +52,6 @@
 %global idna_version		3.3
 %global reqstsoauthlib		requests-oauthlib
 %global reqstsoauthlib_version	1.3.0
-%global oauthlib		oauthlib
-%global oauthlib_version	3.1.1
 %global ruamelyaml		ruamel.yaml
 %global ruamelyaml_version	0.17.16
 %global setuptools		setuptools
@@ -59,7 +60,7 @@
 Name: fence-agents
 Summary: Set of unified programs capable of host isolation ("fencing")
 Version: 4.10.0
-Release: 36%{?alphatag:.%{alphatag}}%{?dist}
+Release: 37%{?alphatag:.%{alphatag}}%{?dist}
 License: GPLv2+ and LGPLv2+
 URL: https://github.com/ClusterLabs/fence-agents
 Source0: https://fedorahosted.org/releases/f/e/fence-agents/%{name}-%{version}.tar.gz
@@ -115,7 +116,7 @@ Source1031: idna-2.10-py2.py3-none-any.whl
 Source1032: isodate-0.6.0-py2.py3-none-any.whl
 Source1033: msrest-0.6.21-py2.py3-none-any.whl
 Source1034: msrestazure-0.6.4-py2.py3-none-any.whl
-Source1035: oauthlib-3.1.1-py2.py3-none-any.whl
+Source1035: %{oauthlib}-%{oauthlib_version}.tar.gz
 Source1036: PyJWT-2.1.0-py3-none-any.whl
 Source1037: requests-2.25.1-py2.py3-none-any.whl
 Source1038: requests_oauthlib-1.3.0-py2.py3-none-any.whl
@@ -179,16 +180,15 @@ Source1087: %{requests}-%{requests_version}.tar.gz
 Source1088: %{chrstnormalizer}-%{chrstnormalizer_version}.tar.gz
 Source1089: %{idna}-%{idna_version}.tar.gz
 Source1090: %{reqstsoauthlib}-%{reqstsoauthlib_version}.tar.gz
-Source1091: %{oauthlib}-%{oauthlib_version}.tar.gz
-Source1092: %{ruamelyaml}-%{ruamelyaml_version}.tar.gz
-Source1093: %{setuptools}-%{setuptools_version}.tar.gz
+Source1091: %{ruamelyaml}-%{ruamelyaml_version}.tar.gz
+Source1092: %{setuptools}-%{setuptools_version}.tar.gz
 ## required for installation
-Source1094: setuptools_scm-6.3.2.tar.gz
-Source1095: packaging-21.2-py3-none-any.whl
-Source1096: poetry-core-1.0.7.tar.gz
-Source1097: pyparsing-3.0.1.tar.gz
-Source1098: tomli-1.0.1.tar.gz
-Source1099: wheel-0.37.0-py2.py3-none-any.whl
+Source1093: setuptools_scm-6.3.2.tar.gz
+Source1094: packaging-21.2-py3-none-any.whl
+Source1095: poetry-core-1.0.7.tar.gz
+Source1096: pyparsing-3.0.1.tar.gz
+Source1097: tomli-1.0.1.tar.gz
+Source1098: wheel-0.37.0-py2.py3-none-any.whl
 ### END
 
 Patch0: ha-cloud-support-aliyun.patch
@@ -1435,6 +1435,10 @@ are located on corosync cluster nodes.
 %endif
 
 %changelog
+* Tue Nov  8 2022 Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-37
+- Upgrade bundled python-oauthlib
+  Resolves: rhbz#2128564
+
 * Mon Oct 31 2022 Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-36
 - fence_virtd: add link to uri examples and uri w/socket path
   example for when VMS are run as non-root user to manpage
diff --git a/sources b/sources
index 70c45eb..eebeba2 100644
--- a/sources
+++ b/sources
@@ -44,7 +44,7 @@ SHA512 (msrestazure-0.6.4-py2.py3-none-any.whl) = aa4329e3a6ba639d0061c1eb0712b9
 SHA512 (msal-1.18.0.tar.gz) = 70e7753dd9a218589c6082c2c706365e421e65476c5775db4abca52e1ca88ec02fd800fe885e3849a91ba2f4690d4acc8736d99e4320fad012c8ba411b0ef068
 SHA512 (msal-extensions-1.0.0.tar.gz) = 5dc22a64a535ac9c7488d0d1e85e2f8320cb5c9e4cb5891599c8fc07060ff1eac310fe93ef42416142600ade8666ac4f0a3614a3e81950311f6d752cac5de959
 SHA512 (portalocker-2.5.1.tar.gz) = a1aeea4cb09a05d4fc65a346965b5af509963f84c6b440bed974770576cab8d5c94c8535f2debd72613f3c603cf9fe3cc236fac6bec2fd69d7d48d206ba4c344
-SHA512 (oauthlib-3.1.1-py2.py3-none-any.whl) = 93ec8d127b4167874d5e561566b52fa93061584ef38633f2a86b9e6009f769ce8a11d71d80f49eccdd6408fff1d12955d96c79c47e6ef809a9386968f4836832
+SHA512 (oauthlib-3.2.2.tar.gz) = c147b96e0ab0d1a8845f525e80831cfd04495134dd1f17fd95eac62f3a95c91e6dca9d38e34206537d77f3c12dd5b553252239318ba39546979c350e96536b8b
 SHA512 (PyJWT-2.1.0-py3-none-any.whl) = d2f632379ecb3eb9c02d67f6da30d0c363f439936b5a6bc1172a0a33dc7e4784ee8b10c258d24ac40b5efbb252e7921c0842699f4b2d40eff99333557b531fcc
 SHA512 (requests-2.25.1-py2.py3-none-any.whl) = cc0afada76d46295c685ac060d15a1ccb9af671522cb7b4fa0ad11988853715d1b7c31d42fa1e72a576cbd775db174da5bc03ab25c1e31c234c37740a63a6bcf
 SHA512 (requests_oauthlib-1.3.0-py2.py3-none-any.whl) = 17d5e66d174e57ef1dae451a20bce215a3cc3d7ab1a5b922d4a66cb49b497c9a0799bd90b5a378648335daee7cf80f843f065d90410bfa791f989f76300a02d7
@@ -97,7 +97,6 @@ SHA512 (requests-2.26.0.tar.gz) = c3397d77f0d2f1afb05661c4b98adad6c1ddaf36090625
 SHA512 (charset-normalizer-2.0.7.tar.gz) = 7096fa23fade52c8eee2577b87aa574deffe6f66e8986f71172f3b9212bd6c6fb17901cceab90144c9d07de8bc6f5e320497daa3d3f749f436788232d4cba088
 SHA512 (idna-3.3.tar.gz) = 70b7cc8718e7d7899c75cfe476f044eae5a2fa03801fc9c12e3a092627ca943ffc4a578f9b8a55e181a11564835e125cfaaa577c02a6461dbb97366e620e53ad
 SHA512 (requests-oauthlib-1.3.0.tar.gz) = 7ef206aaf50cd3289f04175ff3a08022d00aeaaba57a6580912f37c30880322ec71ae9f6af7edc99efe6043fc6c19ba2c9f6fc0f29c126be28cde22bb885510d
-SHA512 (oauthlib-3.1.1.tar.gz) = 1c18f265a6017a6f2bf77507f5de095b439be36f309316993b547ded0f306461b058dcb85dc245bf26f65a9c77be44ca38f9053f3300a9b5cb92332b61a7f307
 SHA512 (ruamel.yaml-0.17.16.tar.gz) = 61780127c23a2fa20c6ce29b27790b72538b5ea0370906d38f4cfe760c30a3756022a385d3f241dd88199358ff152d624dc372fbe7e1fd6d2959f873daf1263d
 SHA512 (setuptools-58.3.0.tar.gz) = 5a38231c2ce361ad45befbd0de34dd7dde9d15f25e7fe2b8cf595d43eeee86fb3c2400e5b2676b547a025217aad85e63b1db6d9778baa412eefb25b22170c587
 SHA512 (setuptools_scm-6.3.2.tar.gz) = 9a16552803ef92367ad71007cf322737b5baa58b924083f04c860875bf6cb2e2bb4f43a7f89778b040c2eb55c5d32de479a918056519339820c6d0f1a6a386f0