Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Fedora 42 scitokens-cpp Update FEDORA-2026-a6d1791c49 Scope Path Fix

fedora
Calendar Grey March 23, 2026
Dist Fedora Esm H88
Fixes to sibling-prefix authorization bypasses and scope path validations in scitokens-cpp for Fedora 42.
Fix scope path boundary validation to deny sibling-prefix authorization bypasses Reject parent-directory traversal in scope paths, including encoded traversal forms Add regression ...

Summary

C++ Implementation of the SciTokens Library

Update Information:

Fix scope path boundary validation to deny sibling-prefix authorization bypasses Reject parent-directory traversal in scope paths, including encoded traversal forms Add regression tests covering sibling-prefix and traversal authorization checks

Change Log

* Fri Mar 13 2026 Derek Weitzel - 1.4.1-1 - Fix scope path boundary validation to deny sibling-prefix authorization bypasses - Reject parent-directory traversal in scope paths, including encoded traversal forms - Add regression tests covering sibling-prefix and traversal authorization checks

References

Fedora Update Notification FEDORA-2026-a6d1791c49 2026-03-23 00:54:11.125976+00:00 Name : scitokens-cpp Product : Fedora 42 Version : 1.4.1 Release : 1.fc42 URL : https://github.com/scitokens/scitokens-cpp Summary : C++ Implementation of the SciTokens Library Description : C++ Implementation of the SciTokens Library

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a6d1791c49' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: scitokens-cpp
Product: Fedora 42
Version: 1.4.1
Release: 1.fc42
Summary: C++ Implementation of the SciTokens Library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here