Описание
Security update for mumble
This update for mumble fixes the following issues:
mumble was updated to 1.3.4:
- Fix use of outdated (non-existent) notification icon names
- Fix Security vulnerability caused by allowing non http/https URL schemes in public server list (boo#1182123)
- Server: Fix Exit status for actions like --version or --supw
- Fix packet loss & audio artifacts caused by OCB2 XEX* mitigation
- update apparmor profiles to get warning free again on 15.2
- use abstractions for ssl files
- allow inet dgram sockets as mumble can also work via udp
- allow netlink socket (probably for dbus)
- properly allow lsb_release again
- add support for optional local include
- start murmurd directly as user mumble-server it gets rid of the dac_override/setgid/setuid/chown permissions
Update to upstream version 1.3.3
Client:
- Fixed: Chatbox invisble (zero height) (#4388)
- Fixed: Handling of invalid packet sizes (#4394)
- Fixed: Race-condition leading to loss of shortcuts (#4430)
- Fixed: Link in About dialog is now clickable again (#4454)
- Fixed: Sizing issues in ACL-Editor (#4455)
- Improved: PulseAudio now always samples at 48 kHz (#4449)
Server:
- Fixed: Crash due to problems when using PostgreSQL (#4370)
- Fixed: Handling of invalid package sizes (#4392)
Список пакетов
openSUSE Leap 15.2
mumble-1.3.4-lp152.2.6.1
mumble-32bit-1.3.4-lp152.2.6.1
mumble-server-1.3.4-lp152.2.6.1
Ссылки
- E-Mail link for openSUSE-SU-2021:0300-1
- SUSE Security Ratings
- SUSE Bug 1180068
- SUSE Bug 1182123