K 10 svn:author V 4 feld K 8 svn:date V 27 2016-03-09T22:38:34.178963Z K 7 svn:log V 564 MFH: r410731 security/libotr: Update to 4.1.1 Changes: * Fix an integer overflow bug that can cause a heap buffer overflow (and from there remote code execution) on 64-bit platforms * Fix possible free() of an uninitialized pointer * Be stricter about parsing v3 fragments * Add a testsuite ("make check" to run it), but only on Linux for now, since it uses Linux-specific features such as epoll * Fix a memory leak when reading a malformed instance tag file * Protocol documentation clarifications Security: CVE-2016-2851 Approved by: ports-secteam (with hat) END