An insufficient session expiration has been reported in Telegram.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-im/telegram-desktop | * | < 2.4.11 | >= 2.4.11 |
| net-im/telegram-desktop-bin | * | < 2.4.11 | >= 2.4.11 |
Telegram is a cloud-based mobile and desktop messaging app with a focus on security and speed.
It was discovered that Telegram failed to invalidate a recently active session.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Telegram users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-im/telegram-desktop-2.4.11"
All Telegram binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-im/telegram-desktop-bin-2.4.11"
Multiple vulnerabilities have been found in Telegram, the worst of which could result in information disclosure.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-im/telegram-desktop | * | < 2.4.4 | >= 2.4.4 |
Telegram is a messaging app with a focus on speed and security.
Multiple vulnerabilities have been discovered in Telegram Desktop. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Telegram Desktop users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-im/telegram-desktop-2.4.4"