From patchwork Tue Nov 3 19:44:12 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10647 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR1" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4jJzZD2cB2z3x5B for ; Tue, 03 Nov 2026 19:45:24 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE2" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4jJzZ42022z7Cl for ; Tue, 03 Nov 2026 19:45:16 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4jJzY04SQbz379J for ; Tue, 03 Nov 2026 19:44:20 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR1" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4jJzXx4RSnz36XJ for ; Tue, 03 Nov 2026 19:44:17 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4jJzXx0Ww1z7C9; Tue, 03 Nov 2026 19:44:17 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1793735057; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=E3YYL9ZyMiNSTs9vP3lP9kfkhsMBZydFKToNXIO8HlA=; b=aHUEcbUhPM+sIxVy4b8G/wxC7itf8NaCxSMF554w5HKXkHLM4RQzPu5B8KFsosl7yMtUC4 eRGtW23ugD/FNQCQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1793735057; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=E3YYL9ZyMiNSTs9vP3lP9kfkhsMBZydFKToNXIO8HlA=; b=sST91K0EBJVun22xiKlSShlASDx31JrAcu1psU7QqlfNBITx4o/7SePyjGiiOIZWaSCPPu 7fRHCVkqzkYf6llNs4YFVU977JpvcgvBAC1zZHCldDxgk1a1b4GdLr3eI+C2rqa33z6Drk MBNlhrXUPgUt1QBolgCsDBzKI2uvJOOnZfu5Rf7kp4iK8bSBewuonlxpPldVEJ71VBxOkV 0ICvCHBbxRO8WSV/F93ZkMC5pfqO5YrcUJcTBWZ+Rj2dQFiH5R5wwERbREsruGpaxsfgAU s3hc+eIyBcB0W5gCRNapTq9OuMFUE2485bkIdQB4j0UO2KNYEazmLsQKF5MlkA== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] oath-toolkit: Update to version 2.6.15 Date: Tue, 3 Nov 2026 20:44:12 +0100 Message-ID: <20261103194412.1190470-4-adolf.belka@ipfire.org> In-Reply-To: <20261103194412.1190470-1-adolf.belka@ipfire.org> References: <20261103194412.1190470-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 2.6.14 to 2.6.15 - No change in rootfile - 1 CVE fix - Changelog 2.6.15 ** oathtool: Add --hex which correspond to the long-time default behaviour. Reported by Kang-Che Sung in . ** oathtool: Reject --hotp --totp instead of treating it as --totp. Reported by Kang-Che Sung in . ** oathtool: Reject further nonsense parameter combinations. Combining --hotp with --time-step-size, --start-time, or --now does not make sense. Combining --totp with --counter does not make sense. All these are now rejected as user errors. ** libpskc: Fix PSKC signature verification bypass. See https://oath-toolkit.codeberg.page/CVE-2026-109117.html or (file in git) website/CVE-2026-109117.txt for advisory. Signed-off-by: Adolf Belka --- lfs/oath-toolkit | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/oath-toolkit b/lfs/oath-toolkit index 3834d010d..c739f3ea5 100644 --- a/lfs/oath-toolkit +++ b/lfs/oath-toolkit @@ -24,7 +24,7 @@ include Config -VER = 2.6.14 +VER = 2.6.15 THISAPP = oath-toolkit-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0d20e9d60350268080abd245b47bd84ae426a0007cba8af049994a1f6a5f9153220a570f3ff93432a8c369e8becc342011cea46cf3c75cad2e3f8a70107af2e3 +$(DL_FILE)_BLAKE2 = a1a7a40b5da5c2f01f59cc41445bc40468f7e12f2e4b87fdded6b1186539aa7bfdc72b7cbefc093bdefb88a5fc62f336b6e51cfee1538847b0143a35ba5d8127 install : $(TARGET)