USN-7059-2
oath-toolkit vulnerability
USN-7059-1 fixed a vulnerability in OATH Toolkit library. This update provides the corresponding update for Ubuntu 24.10.
Original advisory details:
Fabian Vogt discovered that OATH Toolkit incorrectly handled file permissions. A remote attacker could possibly use this issue to overwrite root owned files, leading to a privilege escalation attack. (CVE-2024-47191)
What each source reports
OSV No score
oath-toolkit vulnerability
USN-7059-1 fixed a vulnerability in OATH Toolkit library. This update provides the corresponding update for Ubuntu 24.10.
Original advisory details:
Fabian Vogt discovered that OATH Toolkit incorrectly handled file permissions. A remote attacker could possibly use this issue to overwrite root owned files, leading to a privilege escalation attack. (CVE-2024-47191)
- Record
USN-7059-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
oath-toolkitUbuntu:24.10 |
before 2.6.11-3ubuntu1, plus listed versions 2.6.11-2.1build32.6.11-3 |
2.6.11-3ubuntu1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-7059-2 is a vulnerability with no CVSS score yet in oath-toolkit, published October 17, 2024. No source lists public exploit code. Fixed in oath-toolkit 2.6.11-3ubuntu1.