diff mbox series

oath-toolkit: Update to version 2.6.15

Message ID 20261103194412.1190470-4-adolf.belka@ipfire.org
State New
Headers
Series oath-toolkit: Update to version 2.6.15 |

Commit Message

Adolf Belka 3 Nov 2026, 7:44 p.m. UTC 
- Update from version 2.6.14 to 2.6.15
- No change in rootfile
- 1 CVE fix
- Changelog
2.6.15
	** oathtool: Add --hex which correspond to the long-time default behaviour.
	   Reported by Kang-Che Sung <Explorer09> in
	   <https://codeberg.org/oath-toolkit/oath-toolkit/issues/117>.
	** oathtool: Reject --hotp --totp instead of treating it as --totp.
	   Reported by Kang-Che Sung <Explorer09> in
	   <https://codeberg.org/oath-toolkit/oath-toolkit/issues/116>.
	** oathtool: Reject further nonsense parameter combinations.
	   Combining --hotp with --time-step-size, --start-time, or --now does
	   not make sense.  Combining --totp with --counter does not make sense.
	   All these are now rejected as user errors.
	** libpskc: Fix PSKC signature verification bypass.
	   See https://oath-toolkit.codeberg.page/CVE-2026-109117.html or (file
	   in git) website/CVE-2026-109117.txt for advisory.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/oath-toolkit | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
diff mbox series

Patch

diff --git a/lfs/oath-toolkit b/lfs/oath-toolkit
index 3834d010d..c739f3ea5 100644
--- a/lfs/oath-toolkit
+++ b/lfs/oath-toolkit
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 2.6.14
+VER        = 2.6.15
 
 THISAPP    = oath-toolkit-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 0d20e9d60350268080abd245b47bd84ae426a0007cba8af049994a1f6a5f9153220a570f3ff93432a8c369e8becc342011cea46cf3c75cad2e3f8a70107af2e3
+$(DL_FILE)_BLAKE2 = a1a7a40b5da5c2f01f59cc41445bc40468f7e12f2e4b87fdded6b1186539aa7bfdc72b7cbefc093bdefb88a5fc62f336b6e51cfee1538847b0143a35ba5d8127
 
 install : $(TARGET)