FEDORA-2026-a6d1791c49 — security update for scitokens-cpp

stable

scitokens-cpp-1.4.1-1.fc42

FEDORA-2026-a6d1791c49 created by djw8605 4 months ago for Fedora 42

Fix scope path boundary validation to deny sibling-prefix authorization bypasses
Reject parent-directory traversal in scope paths, including encoded traversal forms
Add regression tests covering sibling-prefix and traversal authorization checks

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-a6d1791c49

This update has been submitted for testing by djw8605.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has been pushed to testing.

4 months ago

This update has been submitted for stable by bodhi.

4 months ago

This update has been pushed to stable.

4 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-1

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 months ago

in testing

4 months ago

in stable

4 months ago

approved

4 months ago

Builds

scitokens-cpp-1.4.1-1.fc42

Automated Test Results

ignored