{"id":"SUSE-SU-2023:3256-1","summary":"Security update for pipewire","details":"This update for pipewire fixes the following security issues:\n\n  - Fixed issue where an app which only has permission to access one stream can also access other streams (bsc#1213682).\n\n  Bugfixes:\n  - Fixed division by 0 and other issues with invalid values (glfo#pipewire/pipewire#2953)\n  - Fixed an overflow resulting in choppy sound in some cases (glfo#pipewire/pipewire#2680)\n","modified":"2023-08-09T11:46:43Z","published":"2023-08-09T11:46:43Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233256-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213682"}],"affected":[{"package":{"name":"pipewire","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","purl":"pkg:rpm/suse/pipewire&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"pipewire-tools":"0.3.49-150400.3.3.1","pipewire":"0.3.49-150400.3.3.1","gstreamer-plugin-pipewire":"0.3.49-150400.3.3.1","libpipewire-0_3-0":"0.3.49-150400.3.3.1","pipewire-lang":"0.3.49-150400.3.3.1","pipewire-modules-0_3":"0.3.49-150400.3.3.1","pipewire-spa-plugins-0_2":"0.3.49-150400.3.3.1","pipewire-spa-tools":"0.3.49-150400.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3256-1.json"}},{"package":{"name":"pipewire","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","purl":"pkg:rpm/suse/pipewire&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"pipewire-doc":"0.3.49-150400.3.3.1","pipewire-lang":"0.3.49-150400.3.3.1","pipewire-libjack-0_3-devel":"0.3.49-150400.3.3.1","pipewire-libjack-0_3":"0.3.49-150400.3.3.1","pipewire-pulseaudio":"0.3.49-150400.3.3.1","pipewire-alsa":"0.3.49-150400.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3256-1.json"}},{"package":{"name":"pipewire","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/pipewire&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.49-150400.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"pipewire-alsa":"0.3.49-150400.3.3.1","pipewire-doc":"0.3.49-150400.3.3.1","pipewire-lang":"0.3.49-150400.3.3.1","pipewire-libjack-0_3":"0.3.49-150400.3.3.1","pipewire-spa-plugins-0_2-32bit":"0.3.49-150400.3.3.1","gstreamer-plugin-pipewire":"0.3.49-150400.3.3.1","libpipewire-0_3-0-32bit":"0.3.49-150400.3.3.1","libpipewire-0_3-0":"0.3.49-150400.3.3.1","pipewire-devel":"0.3.49-150400.3.3.1","pipewire-libjack-0_3-32bit":"0.3.49-150400.3.3.1","pipewire-libjack-0_3-devel":"0.3.49-150400.3.3.1","pipewire-modules-0_3-32bit":"0.3.49-150400.3.3.1","pipewire-spa-plugins-0_2":"0.3.49-150400.3.3.1","pipewire-alsa-32bit":"0.3.49-150400.3.3.1","pipewire-modules-0_3":"0.3.49-150400.3.3.1","pipewire-pulseaudio":"0.3.49-150400.3.3.1","pipewire-tools":"0.3.49-150400.3.3.1","pipewire-spa-tools":"0.3.49-150400.3.3.1","pipewire":"0.3.49-150400.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3256-1.json"}}],"schema_version":"1.7.3"}