Fedora 43 scitokens-cpp Important Boundary Validation Update Found
fedora
March 23, 2026
Fix scope path boundary validation to deny sibling-prefix authorization bypasses Reject parent-directory traversal in scope paths, including encoded traversal forms Add regression ...
Summary
C++ Implementation of the SciTokens Library
Update Information:
Fix scope path boundary validation to deny sibling-prefix authorization bypasses Reject parent-directory traversal in scope paths, including encoded traversal forms Add regression tests covering sibling-prefix and traversal authorization checks
Topics Covered
Change Log
* Fri Mar 13 2026 Derek Weitzel
References
Fedora Update Notification
FEDORA-2026-52c99ecf64
2026-03-23 01:07:08.010689+00:00
Name : scitokens-cpp
Product : Fedora 43
Version : 1.4.1
Release : 1.fc43
URL : https://github.com/scitokens/scitokens-cpp
Summary : C++ Implementation of the SciTokens Library
Description :
C++ Implementation of the SciTokens Library
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-52c99ecf64' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Name: scitokens-cpp
Product: Fedora 43
Version: 1.4.1
Release: 1.fc43
Summary: C++ Implementation of the SciTokens Library
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!