Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

openSUSE 15 Backports: 2020:1439-2 Moderate: Mumble Security Fix

opensuse
Calendar Grey September 18, 2020
Dist Opensuse Esm H88
Critical notification for Mumble on openSUSE regarding security vulnerabilities and improved reliability, update immediately.
An update that contains security fixes can now be installed.

Description

This update for mumble fixes the following issues:

mumble was updated 1.3.2:

* client: Fixed overlay not starting

Update to upstream version 1.3.1

- Security

* Fixed: Potential exploit in the OCB2 encryption (#4227) boo#1174041

- ICE

* Fixed: Added missing UserKDFIterations field to UserInfo => Prevents

getRegistration() from failing with enumerator

out of range error (#3835)

- GRPC

* Fixed: Segmentation fault during murmur shutdown (#3938)

- Client

* Fixed: Crash when using multiple monitors (#3756)

* Fixed: Don't send empty message from clipboard via shortcut, if

clipboard is empty (#3864)

* Fixed: Talking indicator being able to freeze to indicate talking when

self-muted (#4006)

* Fixed: High CPU usage for update-check if update server not available

(#4019)

* Fixed: DBus getCurrentUrl returning empty string when not in

root-channel (#4029)

* Fixed: Small parts...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP2:

zypper in -t patch openSUSE-2020-1439=1

Package List

- openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64):

mumble-1.3.2-bp152.2.3.1

mumble-debuginfo-1.3.2-bp152.2.3.1

mumble-debugsource-1.3.2-bp152.2.3.1

mumble-server-1.3.2-bp152.2.3.1

mumble-server-debuginfo-1.3.2-bp152.2.3.1

- openSUSE Backports SLE-15-SP2 (aarch64_ilp32):

mumble-64bit-1.3.2-bp152.2.3.1

mumble-64bit-debuginfo-1.3.2-bp152.2.3.1

References

https://bugzilla.suse.com/1174041

--

Announcement ID: openSUSE-SU-2020:1439-2
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here