[Git][security-tracker-team/security-tracker][master] Add CVE-2026-109117/oath-toolkit
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 14 04:52:24 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4784ba0f by Salvatore Bonaccorso at 2026-10-14T05:51:51+02:00
Add CVE-2026-109117/oath-toolkit
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2026-109117
+ - oath-toolkit 2.6.15-1
+ NOTE: https://oath-toolkit.codeberg.page/CVE-2026-109117.html
+ NOTE: Fixed by: https://codeberg.org/oath-toolkit/oath-toolkit/commit/5000be81a938a3bc01fb1a4636e89c19588ce7fb (v2.6.15)
CVE-2026-XXXX [GHSA-48f2-29wv-5jgc: Exotic RainerScript replace() 32-bit output-length wrap causes a heap buffer overflow]
- rsyslog <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2026/10/13/12
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4784ba0fbb5256e4eaf04512211ac764777045d5
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4784ba0fbb5256e4eaf04512211ac764777045d5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/57eacfdc/attachment.htm>
More information about the debian-security-tracker-commits
mailing list