Version 3.2.1 of libotr has been released, and is available on the OTR website, http://otr.cypherpunks.ca/
This version corrects two heap overflows reported by our users: - A small write overflow, reported by Justin Ferguson - A large read overflow, reported by Ben Hawkes If you use libotr as a shared library, replacing libotr.so.2.2.0 with the updated libotr.so.2.2.1 (yes, those "2"s are correct) will work fine. If you linked libotr statically into your program, you should relink with the new version. If you are a user of pidgin-otr for Windows, you should download the updated version 3.2.1-2 right away: http://www.cypherpunks.ca/otr/binaries/windows/pidgin-otr-3.2.1-2.exe The gpg signature is at: http://www.cypherpunks.ca/otr/binaries/windows/pidgin-otr-3.2.1-2.exe.asc We are also in the process of finalizing version 4.0.0. Watch this space. Thanks, - Ian _______________________________________________ OTR-dev mailing list [email protected] http://lists.cypherpunks.ca/mailman/listinfo/otr-dev
