An update that contains security fixes can now be installed. . openSUSE Security Update: Security update for mumble ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0312-1 Rating: moderate References: #1180068 #1182123 Affected Products: openSUSE Backports SLE-15-SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for mumble fixes the following issues: mumble was updated to 1.3.4: * Fix use of outdated (non-existent) notification icon names * Fix Security vulnerability caused by allowing non http/https URL schemes in public server list (boo#1182123) * Server: Fix Exit status for actions like --version or --supw * Fix packet loss & audio artifacts caused by OCB2 XEX* mitigation - update apparmor profiles to get warning free again on 15.2 - use abstractions for ssl files - allow inet dgram sockets as mumble can also work via udp - allow netlink socket (probably for dbus) - properly allow lsb_release again - add support for optional local include - start murmurd directly as user mumble-server it gets rid of the dac_override/setgid/setuid/chown permissions Update to upstream version 1.3.3 Client: * Fixed: Chatbox invisble (zero height) (#4388) * Fixed: Handling of invalid packet sizes (#4394) * Fixed: Race-condition leading to loss of shortcuts (#4430) * Fixed: Link in About dialog is now clickable again (#4454) * Fixed: Sizing issues in ACL-Editor (#4455) * Improved: PulseAudio now always samples at 48 kHz (#4449) Server: * Fixed: Crash due to problems when using PostgreSQL (#4370) * Fixed: Handling of invalid package sizes (#4392) This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update usethe SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-312=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): mumble-1.3.4-bp152.2.6.1 mumble-server-1.3.4-bp152.2.6.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): mumble-64bit-1.3.4-bp152.2.6.1 References: https://bugzilla.suse.com/1180068 https://bugzilla.suse.com/1182123 . The latest Mumble update on openSUSE tackles security vulnerabilities, implements enhanced moderation functionalities, and boosts overall performance.. openSUSE Security,mumble Update,security Fix,moderate Issue. . LinuxSecurity.com Team
Update to version 1.9.8.1307. Correct playback speed with PulseAdio. Don't try to guess whether to use HTTPS, provided you're using LMS 8.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-8d8de2e043 2020-12-14 01:15:44.821051 --------------------------------------------------------------------------------Name : squeezelite Product : Fedora 32 Version : 1.9.8.1307 Release : 1.20201205git02d08c7.fc32 URL : https://github.com/ralph-irving/squeezelite Summary : Headless music player for streaming from Logitech Media Server Description : Squeezelite is a headless client for Logitech Media Server, and can be used in place of dedicated Squeezebox network music playing hardware. --------------------------------------------------------------------------------Update Information: Update to version 1.9.8.1307. Correct playback speed with PulseAdio. Don't try to guess whether to use HTTPS, provided you're using LMS 8. --------------------------------------------------------------------------------ChangeLog: * Sat Dec 5 2020 Peter Oliver - 1.9.8.1307-1 - Update to version 1.9.8.1307. Fixes #1901872. * Thu Nov 26 2020 Peter Oliver - 1.9.8.1287-2 - Use ALSA backend by default. Works around #1901872, which causes some audio content to play at the wrong speed and pitch. * Tue Nov 17 2020 Peter Oliver - 1.9.8.1287-1 - Update to version 1.9.8.1287. Fixes #1897557. * Fri Sep 4 2020 Peter Oliver - 1.9.7.1273-1 - Update to version 1.9.7.1273. * Thu Sep 3 2020 Peter Oliver - 1.9.7.1270-1 - Update to version 1.9.7.1270. - Build a native PulseAudio binary. * Wed Jul 29 2020 Fedora Release Engineering - 1.9.6.1210-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1897557 - squeezelite-1.9.8.1287 is available https://bugzilla.redhat.com/show_bug.cgi?id=1897557 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-8d8de2e043' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Update to the latest upstream release 1.3.2, also with some security fixes (see bug #1193445 from the native flac package).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-f0d976df9e 2017-01-12 01:46:20.756658 -------------------------------------------------------------------------------- Name : mingw-flac Product : Fedora 25 Version : 1.3.2 Release : 1.fc25 URL : https://xiph.org/flac/ Summary : Encoder/decoder for the Free Lossless Audio Codec Description : FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line metadata editor for FLAC files and input plugins for various music players. -------------------------------------------------------------------------------- Update Information: Update to the latest upstream release 1.3.2, also with some security fixes (see bug #1193445 from the native flac package). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1409574 - Update to 1.3.2 https://bugzilla.redhat.com/show_bug.cgi?id=1409574 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade mingw-flac' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Get the latest Linux and open source security news straight to your inbox.