Jump to content
Compatible Support Forums
Sign in to follow this  
news

[Security Announce] [ MDVA-2009:121 ] pulseaudio

Recommended Posts

This is a multi-part message in MIME format...

 

------------=_1246031130-22127-309

 

 

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

 

_______________________________________________________________________

 

Mandriva Linux Advisory MDVA-2009:121

http://www.mandriva.com/security/

_______________________________________________________________________

 

Package : pulseaudio

Date : June 26, 2009

Affected: 2009.1

_______________________________________________________________________

 

Problem Description:

 

Multiple bugs has been identified and corrected in pulseaudio:

 

- alsa: allow configuration of fallback device strings in profiles

util: if NULL is passed to pa_path_get_filename() just hand it through

alsa: don't hit an assert when invalid module arguments are passed

- alsa: fix wording, we are speaking of card profiles, not output

profiles

- alsa: initialize buffer size before number of periods to improve

compat with some backends

- conf: remove obsolete module-idle-time directive from default config

file/man page

- core: make sure soft mute status stays in sync with hw mute status

endian: fix LE/BE order for 24 bit accessor functions

- log: print file name only when we have it

- man: document 24bit sample types in man page

- man: document log related daemon.conf options

- man: document that tsched doesn't use fragment settings

- mutex: when we fail to fill in mutex into static mutex ptr free

it again

- oss: don't deadlock when we try to resume an OSS device that lacks

a mixer

- simple-protocol: don't hit an assert when we call connection_unlink()

early

- idxset: add enumeration macro PA_IDXSET_FOREACH

- rescue-streams: when one stream move fails try to continue with

the remaining ones

- sample: correctly pass s24-32 formats

- sample-util: fix iteration loop when adjusting volume of s24 samples

- sample-util: properly allocate silence block for s24-32 formats

- sconv: fix a few minor conversion issues

- alsa: be a bit more verbose when a hwparam call fails

- rescue: make we don't end up in an endless loop when we can't move

a sink input

- core: introduce pa_{sink,source}_set_fixed_latency()

- core: cache requested latency only when we are running, not while

we are still constructing

- sample: fix build on BE archs

- alsa: properly convert return values of snd_strerror() to utf8

- alsa: remove debug codeAdditional

 

In addition to these fixes, several patches were recommended by

upstream and QAed with help from Mandriva volunteers. These patches

are also included.

_______________________________________________________________________

 

Updated Packages:

 

Mandriva Linux 2009.1:

41887e72357577e152a391723d0c9684 2009.1/i586/libpulseaudio0-0.9.15-2.0.4mdv2009.1.i586.rpm

4b49123f7ebbd60cb4ca609412dff0c7 2009.1/i586/libpulseaudio-devel-0.9.15-2.0.4mdv2009.1.i586.rpm

cd3766a456d5704b960b3f71251ce632 2009.1/i586/libpulseglib20-0.9.15-2.0.4mdv2009.1.i586.rpm

901a3774a71550f4b01c44b3e62069c4 2009.1/i586/libpulsezeroconf0-0.9.15-2.0.4mdv2009.1.i586.rpm

2a96ba9dd083439c92e32acf99ab4703 2009.1/i586/pulseaudio-0.9.15-2.0.4mdv2009.1.i586.rpm

376b4033c8e64434ab49a27314607dd4 2009.1/i586/pulseaudio-esound-compat-0.9.15-2.0.4mdv2009.1.i586.rpm

4114919c6a84a44979a7f5829502fbfc 2009.1/i586/pulseaudio-module-bluetooth-0.9.15-2.0.4mdv2009.1.i586.rpm

c56b921118a8466009cc2d1a954ec515 2009.1/i586/pulseaudio-module-gconf-0.9.15-2.0.4mdv2009.1.i586.rpm

8b0c68563a62e1ce61c679d703cd143e 2009.1/i586/pulseaudio-module-jack-0.9.15-2.0.4mdv2009.1.i586.rpm

28418c7149f94b45c517ca5784f13038 2009.1/i586/pulseaudio-module-lirc-0.9.15-2.0.4mdv2009.1.i586.rpm

d1035aaad53e82ae549a030f37984ae7 2009.1/i586/pulseaudio-module-x11-0.9.15-2.0.4mdv2009.1.i586.rpm

d37987aabdf5ff9743b97768f904d43b 2009.1/i586/pulseaudio-module-zeroconf-0.9.15-2.0.4mdv2009.1.i586.rpm

b9c0678853733b0da85563d292b29797 2009.1/i586/pulseaudio-utils-0.9.15-2.0.4mdv2009.1.i586.rpm

319afce0295359011047b29397c01526 2009.1/SRPMS/pulseaudio-0.9.15-2.0.4mdv2009.1.src.rpm

 

Mandriva Linux 2009.1/X86_64:

832d3bf5760d33d12e8382d9f72d1a10 2009.1/x86_64/lib64pulseaudio0-0.9.15-2.0.4mdv2009.1.x86_64.rpm

a58ff0abc41ca82a640db004dec65b4d 2009.1/x86_64/lib64pulseaudio-devel-0.9.15-2.0.4mdv2009.1.x86_64.rpm

51d654b2b7591b8f8fc33a00ce78ecda 2009.1/x86_64/lib64pulseglib20-0.9.15-2.0.4mdv2009.1.x86_64.rpm

2fdb08c3b3f910b8e2a2cef1a2b528d0 2009.1/x86_64/lib64pulsezeroconf0-0.9.15-2.0.4mdv2009.1.x86_64.rpm

0cdd3945adcc4b49089b063d6dff73b0 2009.1/x86_64/pulseaudio-0.9.15-2.0.4mdv2009.1.x86_64.rpm

fa344bdcaf858bae124757c9184525b0 2009.1/x86_64/pulseaudio-esound-compat-0.9.15-2.0.4mdv2009.1.x86_64.rpm

5585b4d542b24682e9643edd2b18d7bd 2009.1/x86_64/pulseaudio-module-bluetooth-0.9.15-2.0.4mdv2009.1.x86_64.rpm

7a55bdbe184babb945d331b186a35034 2009.1/x86_64/pulseaudio-module-gconf-0.9.15-2.0.4mdv2009.1.x86_64.rpm

a77a31420525a5f4b4245fc1a6008202 2009.1/x86_64/pulseaudio-module-jack-0.9.15-2.0.4mdv2009.1.x86_64.rpm

229ff12d46a13c58645685f644c536be 2009.1/x86_64/pulseaudio-module-lirc-0.9.15-2.0.4mdv2009.1.x86_64.rpm

2218a87226ceded97839faf760f9c6e2 2009.1/x86_64/pulseaudio-module-x11-0.9.15-2.0.4mdv2009.1.x86_64.rpm

9222f8e869a87664c4d9930cf2ce5267 2009.1/x86_64/pulseaudio-module-zeroconf-0.9.15-2.0.4mdv2009.1.x86_64.rpm

401e5cf66a0cd1d902be04ddcb178004 2009.1/x86_64/pulseaudio-utils-0.9.15-2.0.4mdv2009.1.x86_64.rpm

319afce0295359011047b29397c01526 2009.1/SRPMS/pulseaudio-0.9.15-2.0.4mdv2009.1.src.rpm

_______________________________________________________________________

 

To upgrade automatically use MandrivaUpdate or urpmi. The verification

of md5 checksums and GPG signatures is performed automatically for you.

 

All packages are signed by Mandriva for security. You can obtain the

GPG public key of the Mandriva Security Team by executing:

 

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 

You can view other update advisories for Mandriva Linux at:

 

http://www.mandriva.com/security/advisories

 

If you want to report vulnerabilities, please contact

 

security_(at)_mandriva.com

_______________________________________________________________________

 

Type Bits/KeyID Date User ID

pub 1024D/22458A98 2000-07-10 Mandriva Security Team

 

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.9 (GNU/Linux)

 

iD8DBQFKRMKamqjQ0CJFipgRAjZVAJ9DtSH6ZYEuVGuAPm7brqGcIam/MwCeJ3HM

9urxhb9zGVcslv3XekSpCoI=

=h4J2

-----END PGP SIGNATURE-----

 

 

------------=_1246031130-22127-309

Content-Type: text/plain; name="message-footer.txt"

Content-Disposition: inline; filename="message-footer.txt"

Content-Transfer-Encoding: 8bit

 

To unsubscribe, send a email to sympa ( -at -) mandrivalinux.org

with this subject : unsubscribe security-announce

_______________________________________________________

Want to buy your Pack or Services from Mandriva?

Go to http://www.mandrivastore.com

Join the Club : http://www.mandrivaclub.com

_______________________________________________________

 

------------=_1246031130-22127-309--

 

 

Share this post


Link to post

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
Sign in to follow this  

×