HOTP uri will be misformated since bash 5.2.2 on Fedora

[cmeissner]

In last week there was an update of bash package in Fedora (36). Before I had bash-5.1.16-2.fc36.x86_64 and after bash-5.2.2-1.fc36.x86_64 installed.

After that update the uri of my HOTP tokens is misformatted. Instead of incrementing counter=<N> to counter=<N+1> the new counter is concatinated with the old one to counter=<N>counter=<N+1>.

E.g.

otpauth://hotp/<LABEL>?secret=<SECRET>&counter=148counter=149&digits=6&issuer=<ISSUER>

A quick wokraround is to downgrade bash to latest working version and pinning to that version.

$ sudo dnf downgrade bash-5.1.16-2.fc36.x86_64
$ dnf install 'dnf-command(versionlock)'
$ dnf versionlock add bash