Updated libotr packages fix security vulnerability

A remote attacker may crash or execute arbitrary code in libotr before 4.1.1 by sending large OTR messages. While processing specially crafted messages, attacker controlled data on the heap is written out of bounds CVE-2016-2851...

Fedora 23 : libotr-4.1.1-1.fc23 (2016-8b4f643f3d)

Updated to 4.1.1 for CVE-2016-2851 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 22 : libotr-4.1.1-1.fc22 (2016-fde759f627)

Updated to 4.1.1 for CVE-2016-2851 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

[SECURITY] Fedora 23 Update: libotr-4.1.1-1.fc23

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

Fedora Update for libotr FEDORA-2016-8

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: libotr-4.1.1-1.fc22

Off-the-Record Messaging Library and Toolkit This is a library and toolkit which implements Off-the-Record OTR Messagi ng. OTR allows you to have private conversations over IM by providing Encryptio n, Authentication, Deniability and Perfect forward secrecy...

SUSE SLED11 / SLES11 Security Update : libotr (SUSE-SU-2016:0706-1)

This update for libotr fixes the following issues : - Apply 'libotr-CVE-2016-2851.patch' to fix integer overflows that used to occur on 64-bit architectures when receiving 4GB messages. This flaw could potentially have been exploited by an attacker to remotely execute arbitrary code on the user's...

openSUSE Security Update : libotr / libotr2 (openSUSE-2016-333)

libotr and libotr2 were updated to fix one security issue : - CVE-2016-2851: Integer overflow vulnerability allowed remote attackers to execute arbitrary code on 64 bit platforms boo969785 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

SUSE SLED12 / SLES12 Security Update : libotr (SUSE-SU-2016:0707-1)

This update for libotr fixes the following issue : - Apply 'libotr-CVE-2016-2851.patch' to fix integer overflows that used to occur on 64-bit architectures when receiving 4GB messages. This flaw could potentially have been exploited by an attacker to remotely execute arbitrary code on the user's...

openSUSE: Security Advisory for libotr, libotr2 (openSUSE-SU-2016:0732-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for libotr,libotr2 (important)

libotr and libotr2 were updated to fix one security issue: - CVE-2016-2851: Integer overflow vulnerability allowed remote attackers to execute arbitrary code on 64 bit platforms boo969785...

Ubuntu: Security Advisory (USN-2926-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libotr / libotr2 (openSUSE-2016-322)

libotr and libotr2 were updated to fix one security issue : - CVE-2016-2851: Integer overflow vulnerability allowed remote attackers to execute arbitrary code on 64 bit platforms boo969785 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

libotr 4.1.0 Memory Corruption

X41 D-Sec GmbH Security Advisory: X41-2016-001 Memory Corruption Vulnerability in "libotr" =========================================== Overview -------- Severity Rating: high Confirmed Affected Version: 4.1.0 and below Confirmed Patched Version: libotr 4.1.1 Vendor: OTR Development Team Vendor UR...

Libotr Integer Overflow Vulnerability

libotr is an encrypted instant messaging delivery library Off-the-Record, OTR from Canadian software developer Ian Goldberg and the OTR development team that initiates private conversations on instant messaging and provides encryption, authentication, and other features. An integer overflow...

Ubuntu 12.04 LTS : libotr vulnerability (USN-2926-1)

Markus Vervier discovered that OTR incorrectly handled large incoming messages. A remote attacker could use this issue to cause OTR to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block...

USN-2926-1: OTR vulnerability

Markus Vervier discovered that OTR incorrectly handled large incoming messages. A remote attacker could use this issue to cause OTR to crash, resulting in a denial of service, or possibly execute arbitrary code...

libotr Off-the-Record Secure Messaging Security Patch

Users of secure messaging apps such as Pidgin, Adium and others built upon libotr, the Off-the-Record protocol, are being urged to update immediately to current versions after the discovery of a critical flaw that can be used in targeted attacks to expose encrypted communication. The OTR...

Security update for libotr,libotr2 (important)

libotr and libotr2 were updated to fix one security issue: - CVE-2016-2851: Integer overflow vulnerability allowed remote attackers to execute arbitrary code on 64 bit platforms boo969785...

FreeBSD : libotr -- integer overflow (c2b1652c-e647-11e5-85be-14dae9d210b8)

X41 D-Sec reports : A remote attacker may crash or execute arbitrary code in libotr by sending large OTR messages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacqu...