[Git][security-tracker-team/security-tracker][master] Add CVE-2026-109117/oath-toolkit

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Oct 14 04:52:24 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4784ba0f by Salvatore Bonaccorso at 2026-10-14T05:51:51+02:00
Add CVE-2026-109117/oath-toolkit

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2026-109117
+	- oath-toolkit 2.6.15-1
+	NOTE: https://oath-toolkit.codeberg.page/CVE-2026-109117.html
+	NOTE: Fixed by: https://codeberg.org/oath-toolkit/oath-toolkit/commit/5000be81a938a3bc01fb1a4636e89c19588ce7fb (v2.6.15)
 CVE-2026-XXXX [GHSA-48f2-29wv-5jgc: Exotic RainerScript replace() 32-bit output-length wrap causes a heap buffer overflow]
 	- rsyslog <unfixed>
 	NOTE: https://www.openwall.com/lists/oss-security/2026/10/13/12



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4784ba0fbb5256e4eaf04512211ac764777045d5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4784ba0fbb5256e4eaf04512211ac764777045d5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/57eacfdc/attachment.htm>


More information about the debian-security-tracker-commits mailing list