Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:0878-1

Опубликовано: 24 мар. 2016
Источник: suse-cvrf

Описание

Security update for pidgin-otr

This update to pidgin-otr 4.0.2 fixes the following issue:

  • CVE-2015-8833: use-after-free issue during SMP (boo#970498)

It also contains new and updated translations.

Список пакетов

openSUSE Leap 42.1
pidgin-otr-4.0.2-7.1

Описание

Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item.


Затронутые продукты
openSUSE Leap 42.1:pidgin-otr-4.0.2-7.1

Ссылки
Уязвимость openSUSE-SU-2016:0878-1