ELBA-2026-61727

ELBA-2026-61727 - scitokens-cpp Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2026-02-07

Description

[1.3.0-1]
- Add scitokens-generate-jwks CLI for key generation.
- Add environment variable-based configuration on library initialization.
- Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
- Add negative cache for failed issuer lookups (preventing frequent re-queries)
- Add monitoring API for per-issuer validation statistics
- Add optional background thread for JWKS refresh
- Add keycache load, metadata, and delete APIs
- Revert 'Fix memory leak in rs256_from_coords' by @djw8605
- Add CTest-based integration test with JWKS server and TLS infrastructure

[1.2.0-1]
- Fix segfault if the JSON parser cannot parse the JWKS
- Fix float time claims issue and improve error handling
- Fix security issue with malicious issuer handling in error messages
- Improve JWTVerificationException message to include the invalid issuer
- Update usage on verify command to make the TOKENFILE explicit
- Read token for scitokens-verify from stdin
- Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
- Adding asan value to the job name
- Turn off building unit tests by default.
- Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer. Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
- Fix memory leak in store_public_ec_key
- Fix memory leaks in the unit tests
- Fix memory leak in rs256_from_coords
- Fix memory leak in scitokens_verify

[1.1.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	scitokens-cpp-1.3.0-1.el8.src.rpm	de3a7c63294c23020e573b0a0af5c58aafbae9f9110de785f8e9405b8da7bc8f	-	ol8_aarch64_developer_EPEL
	scitokens-cpp-1.3.0-1.el8.aarch64.rpm	c542011d0f4aa8edceddb1909cf1044f885b1eca34f8a5f11c5f2bdbbe8100a7	-	ol8_aarch64_developer_EPEL
	scitokens-cpp-devel-1.3.0-1.el8.aarch64.rpm	be7c7564fbedb869b72f92a65fce07187d46898c655bffd005953d536520b375	-	ol8_aarch64_developer_EPEL
Oracle Linux 8 (x86_64)	scitokens-cpp-1.3.0-1.el8.src.rpm	de3a7c63294c23020e573b0a0af5c58aafbae9f9110de785f8e9405b8da7bc8f	-	ol8_x86_64_developer_EPEL
	scitokens-cpp-1.3.0-1.el8.x86_64.rpm	84ad48feaaa70de10e1914ec0512cb53e1756dcd53b38786ea0643121c6c5b0a	-	ol8_x86_64_developer_EPEL
	scitokens-cpp-devel-1.3.0-1.el8.x86_64.rpm	eb796947cff0c1b49c86f5888540c0fc606e491dd3981c69448d41bc740fffe5	-	ol8_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team