Fedora alert FEDORA-2026-3fd14ce272 (ongres-scram)

From:
             
 
updates--- via package-announce <package-announce@lists.fedoraproject.org>
To:
             
 
package-announce@lists.fedoraproject.org
Subject:
             
 
[SECURITY] Fedora 43 Update: ongres-scram-3.3-1.fc43
Date:
             
 
Fri, 19 Jun 2026 01:10:22 +0000
Message-ID:
             
 
<20260619011022.EC9366E760@bastion01.rdu3.fedoraproject.org>
Archive-link:
             
 
Article
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-3fd14ce272
2026-06-19 01:08:57.989172+00:00
--------------------------------------------------------------------------------

Name        : ongres-scram
Product     : Fedora 43
Version     : 3.3
Release     : 1.fc43
URL         : https://github.com/ongres/scram
Summary     : Salted Challenge Response Authentication Mechanism (SCRAM) - Java Implementation
Description :
This is a Java implementation of SCRAM (Salted Challenge Response
Authentication Mechanism) which is part of the family of Simple
Authentication and Security Layer (SASL, RFC 4422) authentication
mechanisms. It is described as part of RFC 5802 and RFC7677.

--------------------------------------------------------------------------------
Update Information:

Ongres Scram update and security fix.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 10 2026 Marian Koncek <mkoncek@redhat.com> - 3.3-1
- Update to upstream version 3.3
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2487527 - Silent channel-binding authentication downgrade via unsupported certificate
algorithms
        https://bugzilla.redhat.com/show_bug.cgi?id=2487527
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-3fd14ce272' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgr...

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond...
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/package-ann...
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new