Alerts This Week
Warning Icon 1 654
Alerts This Week
Warning Icon 1 654

Fedora 43 Ongres Scram Major Java Authentication Fix for 2026-3fd14ce272

fedora
Calendar Grey June 18, 2026
Dist Fedora Esm H88
Ongres Scram update enhances authentication security for Fedora 43 users while fixing known vulnerabilities.
Ongres Scram update and security fix.

Summary

This is a Java implementation of SCRAM (Salted Challenge Response

Authentication Mechanism) which is part of the family of Simple

Authentication and Security Layer (SASL, RFC 4422) authentication

mechanisms. It is described as part of RFC 5802 and RFC7677.

Update Information:

Ongres Scram update and security fix.

Change Log

* Wed Jun 10 2026 Marian Koncek - 3.3-1 - Update to upstream version 3.3

References


[ 1 ] Bug #2487527 - Silent channel-binding authentication downgrade via unsupported certificate algorithms https://bugzilla.redhat.com/show_bug.cgi?id=2487527

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3fd14ce272' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: ongres-scram
Product: Fedora 43
Version: 3.3
Release: 1.fc43
Summary: Salted Challenge Response Authentication Mechanism (SCRAM) - Java Implementation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here