UbuntuUpdates.org

Package "pulseaudio"

Name: pulseaudio

Description:

PulseAudio sound server

Latest version: 1:11.1-1ubuntu7.7
Release: bionic (18.04)
Level: security
Repository: main
Homepage: http://www.pulseaudio.org

Links


Download "pulseaudio"


Other versions of "pulseaudio" in Bionic

Repository Area Version
base main 1:11.1-1ubuntu7
base universe 1:11.1-1ubuntu7
security universe 1:11.1-1ubuntu7.7
updates universe 1:11.1-1ubuntu7.8
updates main 1:11.1-1ubuntu7.8
proposed main 1:11.1-1ubuntu7.9
proposed universe 1:11.1-1ubuntu7.9

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:11.1-1ubuntu7.7 2020-05-12 20:07:23 UTC

  pulseaudio (1:11.1-1ubuntu7.7) bionic-security; urgency=medium

  * SECURITY UPDATE: stop snaps from loading and unloading modules, to
    prevent bypass of audio recording restriction (LP: #1877102). Patch thanks
    to James Henstridge
    - d/p/0407-access-Add-access-control-hooks.patch: make sure access
      hook IDs are non-zero.
    - d/p/0700-modules-add-snappy-policy-module.patch: Prevent snaps from
      controlling modules, terminating the daemon, or disconnecting clients.
    - CVE-2020-11931
  * debian/control: Build-Depends on libsnapd-glib-dev (>= 1.49)

 -- Jamie Strandboge <email address hidden> Wed, 06 May 2020 22:08:56 +0000

1877102 snap policy module can be unloaded, circumventing audio recording restrictions for snaps
CVE-2020-11931 RESERVED



About   -   Send Feedback to @ubuntu_updates