CVE-2026-109117
liboath-devel-2.6.15-1.1 on GA media
No scoreFix available
[Unknown description]
What each source reports
OSVopenSUSE-SU-2026:12157-1 No score
liboath-devel-2.6.15-1.1 on GA media
These are all security issues fixed in the liboath-devel-2.6.15-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12157-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-109117 No score
[Unknown description]
- Record
UBUNTU-CVE-2026-109117- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
oath-toolkitAlpaquita:23 |
2.6.7-r1 and later | None known |
oath-toolkitDebian:12 |
All versions, plus listed versions 2.6.10-12.6.11-12.6.11-22.6.11-2.12.6.11-2.1~exp1 Show 9 moreShow less2.6.11-32.6.12-12.6.13-12.6.13-22.6.14-12.6.15-12.6.7-3.12.6.7-3.1+deb12u12.6.9-1 |
None known |
oath-toolkitDebian:13 |
All versions, plus listed versions 2.6.12-12.6.13-12.6.13-22.6.14-12.6.15-1 |
None known |
oath-toolkitDebian:14 |
before 2.6.15-1, plus listed versions 2.6.12-12.6.13-12.6.13-22.6.14-1 |
2.6.15-1 |
oath-toolkitUbuntu:16.04:LTS |
All versions, plus listed versions 2.6.1-1 |
None known |
oath-toolkitUbuntu:18.04:LTS |
All versions, plus listed versions 2.6.1-1 |
None known |
oath-toolkitUbuntu:20.04:LTS |
All versions, plus listed versions 2.6.1-1.3 |
None known |
oath-toolkitUbuntu:22.04:LTS |
All versions, plus listed versions 2.6.6-32.6.6-3build12.6.7-32.6.7-3build12.6.7-3ubuntu0.1 |
None known |
oath-toolkitUbuntu:24.04:LTS |
All versions, plus listed versions 2.6.9-12.6.10-12.6.11-12.6.11-22.6.11-2.1build12.6.11-2.1build22.6.11-2.1build32.6.11-2.1ubuntu0.1 |
None known |
oath-toolkitUbuntu:26.10 |
All versions, plus listed versions 2.6.14-12.6.14-1build12.6.14-1build2 |
None known |
oath-toolkitUbuntu:26.04:LTS |
All versions, plus listed versions 2.6.12-12.6.13-22.6.14-1 |
None known |
oath-toolkitopenSUSE:Tumbleweed |
before 2.6.15-1.1 | 2.6.15-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-109117 is a vulnerability with no CVSS score yet in oath-toolkit, published October 14, 2026. No source lists public exploit code. Fixed in oath-toolkit 2.6.15-1.