[ubuntu/noble-security] pipewire 1.0.5-1ubuntu3.3 (Accepted)

[Kyle Kernick]

pipewire (1.0.5-1ubuntu3.3) noble-security; urgency=medium

  * SECURITY UPDATE: NULL pointer dereference in RAOP module.
    - debian/patches/CVE-2026-14324.patch: limit RTSP content-length and
      check allocation in src/modules/module-raop/rtsp-client.c
    - CVE-2026-14324
  * SECURITY UPDATE: Denial of service in Pulse module.
    - debian/patches/CVE-2026-14330-pre1.patch: Add a MAX_ALLOCA_SIZE limit
      and check element counts before each alloca() call in
      src/modules/module-protocol-pulse/pulse-server.c
    - debian/patches/CVE-2026-14330.patch: Make a function like alloca but
      with overflow checks and a max allocation size in
      spa/include/spa/utils/defs.h, spa/plugins/audioconvert/audioadapter.c,
      src/modules/module-protocol-pulse/defs.h,
      src/modules/module-protocol-pulse/message.c,
      src/modules/module-protocol-pulse/pulse-server.c,
      src/pipewire/buffers.c, and src/pipewire/impl-node.c
    - CVE-2026-14330

Date: 2026-07-09 01:33:11.561489+00:00
Changed-By: Kyle Kernick <kyle.kernick at canonical.com>
https://launchpad.net/ubuntu/+source/pipewire/1.0.5-1ubuntu3.3
-------------- next part --------------
Sorry, changesfile not available.