[OTR-users] libotr-3.2.1 for all platforms and pidgin-otr 3.2.1-2 for Windows available

Ian Goldberg ian at cypherpunks.ca
Tue Aug 14 17:14:48 EDT 2012


Version 3.2.1 of libotr has been released, and is available on
the OTR website, http://otr.cypherpunks.ca/

This version corrects two heap overflows reported by our users:

- A small write overflow, reported by Justin Ferguson
- A large read overflow, reported by Ben Hawkes

If you use libotr as a shared library, replacing libotr.so.2.2.0 with
the updated libotr.so.2.2.1 (yes, those "2"s are correct) will work
fine.

If you linked libotr statically into your program, you should relink
with the new version.

If you are a user of pidgin-otr for Windows, you should download the
updated version 3.2.1-2 right away:

http://www.cypherpunks.ca/otr/binaries/windows/pidgin-otr-3.2.1-2.exe

The gpg signature is at:

http://www.cypherpunks.ca/otr/binaries/windows/pidgin-otr-3.2.1-2.exe.asc


We are also in the process of finalizing version 4.0.0.  Watch this space.


Thanks,

   - Ian



More information about the OTR-users mailing list