-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-70b6dde0dd 2025-12-15 01:09:59.310393+00:00 --------------------------------------------------------------------------------
Name : scitokens-cpp Product : Fedora 42 Version : 1.2.0 Release : 1.fc42 URL : https://github.com/scitokens/scitokens-cpp Summary : C++ Implementation of the SciTokens Library Description : C++ Implementation of the SciTokens Library -------------------------------------------------------------------------------- Update Information: Fix segfault if the JSON parser cannot parse the JWKS Fix float time claims issue and improve error handling Fix security issue with malicious issuer handling in error messages Improve JWTVerificationException message to include the invalid issuer Update usage on verify command to make the TOKENFILE explicit Read token for scitokens-verify from stdin Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions Adding asan value to the job name Turn off building unit tests by default. Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer. Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem. Fix memory leak in store_public_ec_key Fix memory leaks in the unit tests Fix memory leak in rs256_from_coords Fix memory leak in scitokens_verify -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 5 2025 Derek Weitzel <[email protected]> - 1.2.0-1 - Fix segfault if the JSON parser cannot parse the JWKS - Fix float time claims issue and improve error handling - Fix security issue with malicious issuer handling in error messages - Improve JWTVerificationException message to include the invalid issuer - Update usage on verify command to make the TOKENFILE explicit - Read token for scitokens-verify from stdin - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions - Adding asan value to the job name - Turn off building unit tests by default. - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer. Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem. - Fix memory leak in store_public_ec_key - Fix memory leaks in the unit tests - Fix memory leak in rs256_from_coords - Fix memory leak in scitokens_verify * Fri Jul 25 2025 Fedora Release Engineering <[email protected]> - 1.1.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-70b6dde0dd' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
