UbuntuUpdates.org

Package "pulseaudio"

Name: pulseaudio

Description:

PulseAudio sound server
Latest version: 1:13.99.1-1ubuntu3.8
Release: focal (20.04)
Level: security
Repository: main
Homepage: http://www.pulseaudio.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "pulseaudio"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "pulseaudio" in Focal

Repository Area Version
base main 1:13.99.1-1ubuntu3
base universe 1:13.99.1-1ubuntu3
security universe 1:13.99.1-1ubuntu3.8
updates universe 1:13.99.1-1ubuntu3.13
updates main 1:13.99.1-1ubuntu3.13
proposed main 1:13.99.1-1ubuntu3.14
proposed universe 1:13.99.1-1ubuntu3.14

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1:13.99.1-1ubuntu3.8 2020-11-23 17:08:11 UTC

  pulseaudio (1:13.99.1-1ubuntu3.8) focal-security; urgency=medium

  * SECURITY UPDATE: don't rely on SCM_CREDENTIALS to detect snap confined
    clients (LP: #1895928)
    - d/p/0409-pa-client-peer-credentials.patch: drop patch
    - d/p/0409-fix-arg-parsing-after-async-hook.patch: remains of old 0409
      patch not related to pa_creds.
    - d/p/0410-pa-client-peer-apparmor-label.patch: new patch, records
      AppArmor label in pa_client struct for native connections using
      aa_getpeercon.
    - d/p/0702-add-snappy-policy-module.patch: use the AppArmor
      label in the pa_client rather than looking it up via the process ID
      from SCM_CREDENTIALS.
    - CVE-2020-16123
   * Don't block classic snaps from module loading/unloading (LP: #1886854)
    - d/p/0702-add-snappy-policy-module.patch: replace
      deny_to_snaps_hook with a version that allows classic snaps.

 -- James Henstridge <email address hidden> Thu, 15 Oct 2020 17:23:31 -0400
Source diff to previous version
1886854 Race in load-module snap policy check in classic confinement
CVE-2020-16123 RESERVED

Version: 1:13.99.1-1ubuntu3.2 2020-05-12 20:07:29 UTC

  pulseaudio (1:13.99.1-1ubuntu3.2) focal-security; urgency=medium

  * SECURITY UPDATE: stop snaps from loading and unloading modules, to
    prevent bypass of audio recording restriction (LP: #1877102)
    - d/p/0407-access-Add-access-control-hooks.patch: make sure access
      hook IDs are non-zero.
    - d/p/0700-modules-add-snappy-policy-module.patch: Prevent snaps from
      controlling modules, terminating the daemon, or disconnecting clients.
    - CVE-2020-11931

 -- James Henstridge <email address hidden> Wed, 29 Apr 2020 18:44:47 +0800
1877102 snap policy module can be unloaded, circumventing audio recording restrictions for snaps
CVE-2020-11931 RESERVED


About   -   Send Feedback to @ubuntu_updates