Gentoo Linux Security Advisory 201701-10 - Multiple vulnerabilities have been found in libotr and Pidgin OTR, allowing remote attackers to execute arbitrary code. Versions less than 4.1.1 are affected.
d13bfedbb70f7760cf106edf31ad9f23912553d80d14d052eb493a387df6dacf
Debian Linux Security Advisory 3528-1 - Stefan Sperling discovered that pidgin-otr, a Pidgin plugin implementing Off-The-Record messaging, contained a use-after-free bug. This could be used by a malicious remote user to intentionally crash the application, thus causing a denial-of-service.
91076704061523e8bd8949e259aa2c51fc44e8643687d0d0a6c85c950b421c2c