Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0912-1

Опубликовано: 30 мар. 2016
Источник: suse-cvrf

Описание

Security update for pidgin-otr

This update for pidgin-otr fixes the following issues:

  • CVE-2015-8833: A heap based use-after-free issue was fixed in pidgin-otr that could lead to crashes or potential code execution.

Список пакетов

SUSE Linux Enterprise Desktop 12
pidgin-otr-4.0.0-8.1
SUSE Linux Enterprise Desktop 12 SP1
pidgin-otr-4.0.0-8.1
SUSE Linux Enterprise Workstation Extension 12
pidgin-otr-4.0.0-8.1
SUSE Linux Enterprise Workstation Extension 12 SP1
pidgin-otr-4.0.0-8.1

Ссылки

Описание

Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:pidgin-otr-4.0.0-8.1
SUSE Linux Enterprise Desktop 12:pidgin-otr-4.0.0-8.1
SUSE Linux Enterprise Workstation Extension 12 SP1:pidgin-otr-4.0.0-8.1
SUSE Linux Enterprise Workstation Extension 12:pidgin-otr-4.0.0-8.1
Ссылки