Your submission was sent successfully! Close

USN-2401-1: Konversation vulnerability

10 November 2014

Konversation could be made to crash if it received specially crafted network traffic.

Releases

Packages

Details

Manuel Nickschas discovered that Konversation did not properly perform
input sanitization when using Blowfish ECB encryption. A remote attacker
could exploit this to cause a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.04

After a standard system update you need to restart Konversation to make
all the necessary changes.

References