[Pkg-privacy-maintainers] wheezy-backports: libotr5 vulnerable to CVE-2016-2851

Kalle Valo kvalo at adurom.com
Tue Apr 26 16:18:23 UTC 2016


Hi,

I did a quick check and to me it looks like that libotr5 4.1.0-2~bpo70+1
in wheezy-backports is vulnerable to CVE-2016-2851 (remote code
execution)[1]. The version 4.1.1-1 in unstable should be safe. Is anyone
able to upload latest libotr5 to fix this?

Thanks in advance.

[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2851

-- 
Kalle Valo




More information about the Pkg-privacy-maintainers mailing list