openSUSE Leap 15.2: 2021:1498-1 Moderate: Barrier Authentication Issues

This update for barrier fixes the following issues:

Updated to version 2.4.0:

Barrier now supports client identity verification (fixes CVE-2021-42072,

CVE-2021-42073).

Previously a malicious client could connect to Barrier server without any

authentication and send application-level messages. This made the attack

surface of Barrier significantly larger. Additionally, in case the

malicious client got possession of a valid screen name by brute forcing or

other means it could modify the clipboard contents of the server. To

support seamless upgrades from older versions of Barrier this is currently

disabled by default. The feature can be enabled in the settings dialog. If

enabled, older clients of Barrier will be rejected. Barrier now uses

SHA256 fingerprints for establishing security of encrypted SSL

connections. After upgrading client to new version the existing server

fingerprint will need to be approved again. Client and server will show