opensuse-su-2021:1595-1
Vulnerability from csaf_opensuse
Published
2021-12-18 23:06
Modified
2021-12-18 23:06
Summary
Security update for barrier

Notes

Title of the patch
Security update for barrier
Description of the patch
This update for barrier fixes the following issues: Updated to version 2.4.0: Barrier now supports client identity verification (fixes CVE-2021-42072, CVE-2021-42073). Previously a malicious client could connect to Barrier server without any authentication and send application-level messages. This made the attack surface of Barrier significantly larger. Additionally, in case the malicious client got possession of a valid screen name by brute forcing or other means it could modify the clipboard contents of the server. To support seamless upgrades from older versions of Barrier this is currently disabled by default. The feature can be enabled in the settings dialog. If enabled, older clients of Barrier will be rejected. Barrier now uses SHA256 fingerprints for establishing security of encrypted SSL connections. After upgrading client to new version the existing server fingerprint will need to be approved again. Client and server will show both SHA1 and SHA256 server fingerprints to allow interoperability with older versions of Barrier. Bugfixes: * Fixed build failure on mips*el and riscv64 architecture. * Barrier no longer uses openssl CLI tool for any operations and hooks into the openssl library directly. * More X11 clipboard MIME types have been mapped to corresponding converters (#344). * Fixed setup of multiple actions associated with a hotkey. * Fixed setup of hotkeys with special characters such as comma and semicolon (#778). * Fixed transfer of non-ASCII characters coming from a Windows server in certain cases (#527). * Barrier will now regenerate server certificate if it's invalid instead of failing to launch (#802) * Added support for additional keys on Sun Microsystems USB keyboards (#784). * Updated Chinese translation. * Updated Slovak translation. * Theme icons are now preferred to icons distributed together with Barrier (#471). Features: * Added --drop-target option that improves drag and drop support on Windows when Barrier is being run as a portable app. * The --enable-crypto command line option has been made the default to reduce chances of accidental security mishaps when configuring Barrier from command line. A new --disable-crypto command line option has been added to explicitly disable encryption. * Added support for randomart images for easier comparison of SSL certificate fingerprints. The algorithm is identical to what OpenSSH uses. * Implemented a configuration option for Server GUI auto-start. * Made it possible to use keyboard instead of mouse to modify screen layout. * Added support for keyboard backlight media keys * Added support for Eisu_toggle and Muhenkan keys * Added --profile-dir option that allows to select custom profile directory. submitted upstream at https://github.com/symless/synergy-core/pull/6261 * Bug #4749 - Clipboard thread race condition causes assertion * Bug #4720 - Plugin download shows 'Could not get Linux package * Bug #4712 - Unable to send clipboard with size above 1KB when * Bug #4690 - Log line 'activeDesktop' does not use logging * Enhancement #4901 - Auto restart when running from GUI in * Bug #4650 - SSL error log message repeats excessively and * Bug #4601 - Large clipboard data with SSL causes 'protocol is * Bug #4593 - Locking Windows server causes SSL_ERROR_SSL to * Bug #4538 - Windows service crashes intermittently with no * Bug #4566 - Client or server crashes with 'ssl handshake * Bug #4706 - Installer is not output to build config dir * Bug #4704 - Plugin 'ns' release build is overwritten with * Bug #4697 - Timing can allow an SSL socket to be used after * Enhancement #4661 - Log error but do not crash when failing * Enhancement #4708 - Download ns plugin for specific Mac * Enhancement #4587 - Include OpenSSL binaries in source for * Enhancement #4695 - Automatically upload plugins as
Patchnames
openSUSE-2021-1595
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for barrier",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for barrier fixes the following issues:\n\nUpdated to version 2.4.0:\n\nBarrier now supports client identity verification (fixes CVE-2021-42072,\nCVE-2021-42073).\n\nPreviously a malicious client could connect to Barrier server without any\nauthentication and send application-level messages. This made the attack\nsurface of Barrier significantly larger. Additionally, in case the malicious\nclient got possession of a valid screen name by brute forcing or other means\nit could modify the clipboard contents of the server.\nTo support seamless upgrades from older versions of Barrier this is\ncurrently disabled by default. The feature can be enabled in the settings\ndialog. If enabled, older clients of Barrier will be rejected.\nBarrier now uses SHA256 fingerprints for establishing security of encrypted\nSSL connections. After upgrading client to new version the existing server\nfingerprint will need to be approved again. Client and server will show both\nSHA1 and SHA256 server fingerprints to allow interoperability with older\nversions of Barrier.\n\nBugfixes:\n\n* Fixed build failure on mips*el and riscv64 architecture.\n* Barrier no longer uses openssl CLI tool for any operations and hooks into\n  the openssl library directly.\n* More X11 clipboard MIME types have been mapped to corresponding converters\n  (#344).\n* Fixed setup of multiple actions associated with a hotkey.\n* Fixed setup of hotkeys with special characters such as comma and semicolon\n  (#778).\n* Fixed transfer of non-ASCII characters coming from a Windows server in\n  certain cases (#527).\n* Barrier will now regenerate server certificate if it\u0027s invalid instead of\n  failing to launch (#802)\n* Added support for additional keys on Sun Microsystems USB keyboards (#784).\n* Updated Chinese translation.\n* Updated Slovak translation.\n* Theme icons are now preferred to icons distributed together with Barrier\n  (#471).\n\nFeatures:\n\n* Added --drop-target option that improves drag and drop support on Windows\n  when Barrier is being run as a portable app.\n* The --enable-crypto command line option has been made the default to reduce\n  chances of accidental security mishaps when configuring Barrier from command\n  line. A new --disable-crypto command line option has been added to\n  explicitly disable encryption.\n* Added support for randomart images for easier comparison of SSL certificate\n  fingerprints. The algorithm is identical to what OpenSSH uses.\n* Implemented a configuration option for Server GUI auto-start.\n* Made it possible to use keyboard instead of mouse to modify screen layout.\n* Added support for keyboard backlight media keys\n* Added support for Eisu_toggle and Muhenkan keys\n* Added --profile-dir option that allows to select custom profile directory.\n\nsubmitted upstream at https://github.com/symless/synergy-core/pull/6261\n\n* Bug #4749 - Clipboard thread race condition causes assertion\n* Bug #4720 - Plugin download shows \u0027Could not get Linux package\n* Bug #4712 - Unable to send clipboard with size above 1KB when\n* Bug #4690 - Log line \u0027activeDesktop\u0027 does not use logging\n* Enhancement #4901 - Auto restart when running from GUI in\n* Bug #4650 - SSL error log message repeats excessively and\n* Bug #4601 - Large clipboard data with SSL causes \u0027protocol is\n* Bug #4593 - Locking Windows server causes SSL_ERROR_SSL to\n* Bug #4538 - Windows service crashes intermittently with no\n* Bug #4566 - Client or server crashes with \u0027ssl handshake\n* Bug #4706 - Installer is not output to build config dir\n* Bug #4704 - Plugin \u0027ns\u0027 release build is overwritten with\n* Bug #4697 - Timing can allow an SSL socket to be used after\n* Enhancement #4661 - Log error but do not crash when failing\n* Enhancement #4708 - Download ns plugin for specific Mac\n* Enhancement #4587 - Include OpenSSL binaries in source for\n* Enhancement #4695 - Automatically upload plugins as\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2021-1595",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1595-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:1595-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HJIFZZMEQZI47KRZYVOPBZN725K3KS3/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:1595-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HJIFZZMEQZI47KRZYVOPBZN725K3KS3/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-42072 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-42072/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-42073 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-42073/"
      }
    ],
    "title": "Security update for barrier",
    "tracking": {
      "current_release_date": "2021-12-18T23:06:04Z",
      "generator": {
        "date": "2021-12-18T23:06:04Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:1595-1",
      "initial_release_date": "2021-12-18T23:06:04Z",
      "revision_history": [
        {
          "date": "2021-12-18T23:06:04Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "barrier-2.4.0-bp153.2.3.1.aarch64",
                "product": {
                  "name": "barrier-2.4.0-bp153.2.3.1.aarch64",
                  "product_id": "barrier-2.4.0-bp153.2.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "barrier-2.4.0-bp153.2.3.1.i586",
                "product": {
                  "name": "barrier-2.4.0-bp153.2.3.1.i586",
                  "product_id": "barrier-2.4.0-bp153.2.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "barrier-2.4.0-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "barrier-2.4.0-bp153.2.3.1.ppc64le",
                  "product_id": "barrier-2.4.0-bp153.2.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "barrier-2.4.0-bp153.2.3.1.x86_64",
                "product": {
                  "name": "barrier-2.4.0-bp153.2.3.1.x86_64",
                  "product_id": "barrier-2.4.0-bp153.2.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 15 SP3",
                "product": {
                  "name": "SUSE Package Hub 15 SP3",
                  "product_id": "SUSE Package Hub 15 SP3"
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "barrier-2.4.0-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.aarch64"
        },
        "product_reference": "barrier-2.4.0-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "barrier-2.4.0-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.i586"
        },
        "product_reference": "barrier-2.4.0-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "barrier-2.4.0-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.ppc64le"
        },
        "product_reference": "barrier-2.4.0-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "barrier-2.4.0-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.x86_64"
        },
        "product_reference": "barrier-2.4.0-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "barrier-2.4.0-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.aarch64"
        },
        "product_reference": "barrier-2.4.0-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "barrier-2.4.0-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.i586"
        },
        "product_reference": "barrier-2.4.0-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "barrier-2.4.0-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.ppc64le"
        },
        "product_reference": "barrier-2.4.0-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "barrier-2.4.0-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.x86_64"
        },
        "product_reference": "barrier-2.4.0-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-42072",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-42072"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks that could lead to information leaks or integrity corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-42072",
          "url": "https://www.suse.com/security/cve/CVE-2021-42072"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-12-18T23:06:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-42072"
    },
    {
      "cve": "CVE-2021-42073",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-42073"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component (aka the server-side implementation of Barrier) simply by supplying a client label that identifies a valid client configuration. This label is \"Unnamed\" by default but could instead be guessed from hostnames or other publicly available information. In the active session state, an attacker can capture input device events from the server, and also modify the clipboard content on the server.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-42073",
          "url": "https://www.suse.com/security/cve/CVE-2021-42073"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:barrier-2.4.0-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:barrier-2.4.0-bp153.2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-12-18T23:06:04Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-42073"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.