UbuntuUpdates.org

Package "pulseaudio"

Name: pulseaudio

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • PulseAudio ESD compatibility layer
  • Android Audio HAL module for PulseAudio sound server
  • GConf module for PulseAudio sound server
  • jackd modules for PulseAudio sound server

Latest version: 1:8.0-0ubuntu3.14
Release: xenial (16.04)
Level: security
Repository: universe

Links



Other versions of "pulseaudio" in Xenial

Repository Area Version
base main 1:8.0-0ubuntu3
base universe 1:8.0-0ubuntu3
security main 1:8.0-0ubuntu3.14
updates main 1:8.0-0ubuntu3.14
updates universe 1:8.0-0ubuntu3.14

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:8.0-0ubuntu3.14 2020-09-17 23:06:19 UTC

  pulseaudio (1:8.0-0ubuntu3.14) xenial-security; urgency=medium

  * SECURITY UPDATE: potential double-free in the Bluez 5 module (LP: #1884738)
    - d/p/0511-bluetooth-bluez5-fix-double-free-in-pa__init.patch:
      Only free modargs once in each of
      src/modules/bluetooth/module-bluez5-device.c and
      src/modules/bluetooth/module-bluez5-discover.c, patch thanks to Ratchanan
      Srirattanamet.
    - d/p/0512-bluetooth-bluez5-fix-double-free-2.patch: Initialize pointer
      before dereferencing in fail condition.
    - CVE-2020-15710

 -- Avital Ostromich <email address hidden> Thu, 17 Sep 2020 09:38:52 -0400

Source diff to previous version
1884738 Pulseaudio in Ubuntu 16.04 contains a potential double-free bug in Bluez 5 module
CVE-2020-15710 RESERVED

Version: 1:8.0-0ubuntu3.12 2020-05-12 20:07:19 UTC

  pulseaudio (1:8.0-0ubuntu3.12) xenial-security; urgency=medium

  * SECURITY UPDATE: stop snaps from loading and unloading modules, to
    prevent bypass of audio recording restriction (LP: #1877102). Patch thanks
    to James Henstridge
    - d/p/0407-access-Add-access-control-hooks.patch: make sure access
      hook IDs are non-zero.
    - d/p/0450-modules-add-snappy-policy-module.patch: Prevent snaps from
      controlling modules, terminating the daemon, or disconnecting clients.
    - CVE-2020-11931
  * debian/control: Build-Depends on libsnapd-glib-dev (>= 1.49)

 -- Jamie Strandboge <email address hidden> Thu, 07 May 2020 20:43:53 +0000

1877102 snap policy module can be unloaded, circumventing audio recording restrictions for snaps
CVE-2020-11931 RESERVED



About   -   Send Feedback to @ubuntu_updates