ELBA-2026-61732

ELBA-2026-61732 - scitokens-cpp Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2026-02-07

Description

[1.3.0-1]
- Add scitokens-generate-jwks CLI for key generation.
- Add environment variable-based configuration on library initialization.
- Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
- Add negative cache for failed issuer lookups (preventing frequent re-queries)
- Add monitoring API for per-issuer validation statistics
- Add optional background thread for JWKS refresh
- Add keycache load, metadata, and delete APIs
- Revert 'Fix memory leak in rs256_from_coords' by @djw8605
- Add CTest-based integration test with JWKS server and TLS infrastructure

[1.2.0-1]
- Fix segfault if the JSON parser cannot parse the JWKS
- Fix float time claims issue and improve error handling
- Fix security issue with malicious issuer handling in error messages
- Improve JWTVerificationException message to include the invalid issuer
- Update usage on verify command to make the TOKENFILE explicit
- Read token for scitokens-verify from stdin
- Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
- Adding asan value to the job name
- Turn off building unit tests by default.
- Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer. Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
- Fix memory leak in store_public_ec_key
- Fix memory leaks in the unit tests
- Fix memory leak in rs256_from_coords
- Fix memory leak in scitokens_verify

[1.1.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	scitokens-cpp-1.3.0-1.el9.src.rpm	0c55841b1f75ed7890db4a89a1001047053eac982c770ce3435aeb0a60806f03	-	ol9_aarch64_developer_EPEL
	scitokens-cpp-1.3.0-1.el9.aarch64.rpm	19355e8e6f57d138083c07b0536ce8b95de1151f34122ecab9fa5146a4b459d5	-	ol9_aarch64_developer_EPEL
	scitokens-cpp-devel-1.3.0-1.el9.aarch64.rpm	d84aa9012cd498f18a91a1bd4566fee5b55a59f853d7470e9b3b9584eabb0602	-	ol9_aarch64_developer_EPEL
Oracle Linux 9 (x86_64)	scitokens-cpp-1.3.0-1.el9.src.rpm	0c55841b1f75ed7890db4a89a1001047053eac982c770ce3435aeb0a60806f03	-	ol9_x86_64_developer_EPEL
	scitokens-cpp-1.3.0-1.el9.x86_64.rpm	dbb11d6f931f1a716b968f136561169dca85e05c3a9632176335a1f4f4057a39	-	ol9_x86_64_developer_EPEL
	scitokens-cpp-devel-1.3.0-1.el9.x86_64.rpm	97d755cb3931de06e8f1335a2270547fc39a84c8aa35add20879943a9cf4e7e5	-	ol9_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team