Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package oath-toolkit for openSUSE:Factory checked in at 2026-10-16 20:06:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/oath-toolkit (Old) and /work/SRC/openSUSE:Factory/.oath-toolkit.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "oath-toolkit" Fri Oct 16 20:06:48 2026 rev:17 rq:1384962 version:2.6.15 Changes: -------- --- /work/SRC/openSUSE:Factory/oath-toolkit/oath-toolkit.changes 2026-02-05 17:57:50.385162554 +0100 +++ /work/SRC/openSUSE:Factory/.oath-toolkit.new.3698736/oath-toolkit.changes 2026-10-16 20:06:59.656385849 +0200 @@ -1,0 +2,14 @@ +Wed Oct 14 18:51:31 UTC 2026 - Martin Hauke <[email protected]> + +- Update to version 2.6.15 + * oathtool: Add --hex which correspond to the long-time default + behaviour. + * oathtool: Reject --hotp --totp instead of treating it as --totp. + * oathtool: Reject further nonsense parameter combinations. + Combining --hotp with --time-step-size, --start-time, or --now + does not make sense. Combining --totp with --counter does not + make sense. All these are now rejected as user errors. + * libpskc: Fix PSKC signature verification bypass. + See https://oath-toolkit.codeberg.page/CVE-2026-109117.html + +------------------------------------------------------------------- Old: ---- oath-toolkit-2.6.14.tar.gz oath-toolkit-2.6.14.tar.gz.sig New: ---- oath-toolkit-2.6.15.tar.gz oath-toolkit-2.6.15.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ oath-toolkit.spec ++++++ --- /var/tmp/diff_new_pack.YCfzqA/_old 2026-10-16 20:07:00.344414598 +0200 +++ /var/tmp/diff_new_pack.YCfzqA/_new 2026-10-16 20:07:00.346414682 +0200 @@ -18,7 +18,7 @@ %{!?_pam_moduledir: %define _pam_moduledir /%{_lib}/security} Name: oath-toolkit -Version: 2.6.14 +Version: 2.6.15 Release: 0 Summary: Toolkit for one-time password authentication systems License: GPL-3.0-or-later AND LGPL-2.1-or-later ++++++ oath-toolkit-2.6.14.tar.gz -> oath-toolkit-2.6.15.tar.gz ++++++ ++++ 35441 lines of diff (skipped)
