search

tadfisher / pass-otp

A pass extension for managing one-time-password (OTP) tokens
GNU General Public License v3.0
1.26k stars 86 forks source link

HOTP uri will be misformated since bash 5.2.2 on Fedora #171

Open cmeissner opened 1 year ago

cmeissner commented 1 year ago

In last week there was an update of bash package in Fedora (36). Before I had bash-5.1.16-2.fc36.x86_64 and after bash-5.2.2-1.fc36.x86_64 installed.

After that update the uri of my HOTP tokens is misformatted. Instead of incrementing counter=<N> to counter=<N+1> the new counter is concatinated with the old one to counter=<N>counter=<N+1>.

E.g. 

otpauth://hotp/<LABEL>?secret=<SECRET>&counter=148counter=149&digits=6&issuer=<ISSUER>

A quick wokraround is to downgrade bash to latest working version and pinning to that version.

$ sudo dnf downgrade bash-5.1.16-2.fc36.x86_64
$ dnf install 'dnf-command(versionlock)'
$ dnf versionlock add bash