MGASA-2017-0043
Updated irssi-otr packages fix security vulnerability
It was discovered that irssi-otr had a flaw in handing data returned by libotr. After the initiation of the OTR session only the first line was sent as a PRIVMSG, while additional data would be sent as raw commands to the IRC server. The additional data would ordinarily be a human-readable HTML-formatted instruction message from libotr, a fixed string. However this is a minor security concern and the remediation avoids further security issues.
What each source reports
OSV No score
Updated irssi-otr packages fix security vulnerability
It was discovered that irssi-otr had a flaw in handing data returned by libotr. After the initiation of the OTR session only the first line was sent as a PRIVMSG, while additional data would be sent as raw commands to the IRC server. The additional data would ordinarily be a human-readable HTML-formatted instruction message from libotr, a fixed string. However this is a minor security concern and the remediation avoids further security issues.
- Record
MGASA-2017-0043- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
irssi-otrMageia:5 |
before 1.0.2-1.mga5 | 1.0.2-1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2017-0043 is a vulnerability with no CVSS score yet in irssi-otr, published February 7, 2017. No source lists public exploit code. Fixed in irssi-otr 1.0.2-1.mga5.