[ubuntu/bionic-security] pulseaudio 1:11.1-1ubuntu7.11 (Accepted)

[Avital Ostromich]

pulseaudio (1:11.1-1ubuntu7.11) bionic-security; urgency=medium

  * SECURITY UPDATE: don't rely on SCM_CREDENTIALS to detect snap confined
    clients (LP: #1895928)
    - d/p/0409-pa-client-peer-credentials.patch: drop patch
    - d/p/0409-fix-arg-parsing-after-async-hook.patch: remains of old 0409
      patch not related to pa_creds.
    - d/p/0410-pa-client-peer-apparmor-label.patch: new patch, records
      AppArmor label in pa_client struct for native connections using
      aa_getpeercon.
    - d/p/0702-add-snappy-policy-module.patch: use the AppArmor
      label in the pa_client rather than looking it up via the process ID
      from SCM_CREDENTIALS.
    - CVE-2020-16123
   * Don't block classic snaps from module loading/unloading (LP: #1886854)
    - d/p/0702-add-snappy-policy-module.patch: replace
      deny_to_snaps_hook with a version that allows classic snaps.

pulseaudio (1:11.1-1ubuntu7.10) bionic; urgency=medium

  * d/p/0903-device-port-switch-on-port-available-fix-automatic-p.patch
  * (LP: #1882248)

pulseaudio (1:11.1-1ubuntu7.9) bionic; urgency=medium

  [Kai-Chuan Hsieh]
  * alsa-mixer: Correct ucm card name (LP: #1881094)

  [Hui Wang]
  * d/p/0901-alsa-solaris-oss-remove-unnecessary-error-handling-w.patch
  * d/p/0902-alsa-Improve-resume-logic-after-alsa-suspend.patch
  * (LP: #1882042)

pulseaudio (1:11.1-1ubuntu7.8) bionic; urgency=medium

  [Kai-Heng Feng]
  * alsa-mixer: Support dual Front Headphone Jack (lp: #1869819)
  * alsa-mixer: Handle the index for ALSA mixer jack identifiers
  [Tanu Kaskinen <tanuk at iki.fi>]
  * alsa-mixer: autodetect the ELD device
  * alsa-mixer: autodetect the HDMI jack PCM device
  * alsa-mixer: add hw_device_index to pa_alsa_mapping

Date: 2020-11-18 17:46:15.105107+00:00
Changed-By: James Henstridge <james.henstridge at canonical.com>
Signed-By: Avital Ostromich <avital.ostromich at canonical.com>
https://launchpad.net/ubuntu/+source/pulseaudio/1:11.1-1ubuntu7.11
-------------- next part --------------
Sorry, changesfile not available.