Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

Fedora 44 SciTokens-CPP Critical Path Validation Fix 2026-176625c3fc

fedora
Calendar Grey March 23, 2026
Dist Fedora Esm H88
Fix scope path validation and prevent sibling-prefix authorization bypasses in Fedora's SciTokens-C++ library.
Fix scope path boundary validation to deny sibling-prefix authorization bypasses Reject parent-directory traversal in scope paths, including encoded traversal forms Add regression ...

Summary

C++ Implementation of the SciTokens Library

Update Information:

Fix scope path boundary validation to deny sibling-prefix authorization bypasses Reject parent-directory traversal in scope paths, including encoded traversal forms Add regression tests covering sibling-prefix and traversal authorization checks

Change Log

* Fri Mar 13 2026 Derek Weitzel - 1.4.1-1 - Fix scope path boundary validation to deny sibling-prefix authorization bypasses - Reject parent-directory traversal in scope paths, including encoded traversal forms - Add regression tests covering sibling-prefix and traversal authorization checks

References

Fedora Update Notification FEDORA-2026-176625c3fc 2026-03-23 00:15:11.960107+00:00 Name : scitokens-cpp Product : Fedora 44 Version : 1.4.1 Release : 1.fc44 URL : https://github.com/scitokens/scitokens-cpp Summary : C++ Implementation of the SciTokens Library Description : C++ Implementation of the SciTokens Library

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-176625c3fc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: scitokens-cpp
Product: Fedora 44
Version: 1.4.1
Release: 1.fc44
Summary: C++ Implementation of the SciTokens Library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here