Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Ubuntu 12.04 LTS USN-2091-1 Critical: libotr Information Leak

ubuntu
Calendar Grey January 30, 2014
Scroller Ubuntu
Applying security patches for OTR vulnerabilities in Ubuntu 12.04 LTS is essential to protect sensitive data transmitted over networks and reduce risks
Applications using the OTR secure chat protocol could be made to exposesensitive information over the network.

Summary

Applications using the OTR secure chat protocol could be made to expose

sensitive information over the network.

Software Description:

- libotr: Off-the-Record Messaging library

Details:

This update disables the OTR v1 protocol to prevent protocol downgrade

attacks.

Topics%20covered

Topics Covered

security advisory information leak Ubuntu OTR protocol libotr

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  libotr2                         3.2.0-4ubuntu0.2

After a standard system update you need to restart OTR applications to
make all the necessary changes.

References

https://bugs.launchpad.net/ubuntu/+source/libotr/+bug/1266016

Severity
critical
Lowest
Low
Medium
High
Critical

January 29, 2014

Topics%20covered

Topics Covered

security advisory information leak Ubuntu OTR protocol libotr

Package Information

https://launchpad.net/ubuntu/+source/libotr/3.2.0-4ubuntu0.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.