From commodity at finlog.sk  Wed Jul  1 00:12:05 2026
From: commodity at finlog.sk (=?UTF-8?Q?FAU_Logistics_=E2=80=93_Mineral_Trading_?= =?UTF-8?Q?Division?=)
Date: Tue, 30 Jun 2026 23:12:05 +0000
Subject: =?UTF-8?Q?Direct_Mandate_for_Copper_Cathode=2C_Cop?=
 =?UTF-8?Q?per_Concentrate=2C_Gold_=26_Cobalt_Suppl?=
 =?UTF-8?Q?y_=E2=80=93_ABD_SARL_Company_Congo?=
Message-ID: <5694030e-320b-3364-839b-d95f1b516604@finlog.sk>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-pulseaudio-devel/attachments/20260630/83faaaa9/attachment.htm>

From jmm at inutil.org  Thu Jul  2 20:44:51 2026
From: jmm at inutil.org (=?UTF-8?Q?Moritz_M=C3=BChlenhoff?=)
Date: Thu, 2 Jul 2026 21:44:51 +0200
Subject: Bug#1141309: pulseaudio: CVE-2026-14330
Message-ID: <aka_swtASTW3u9fG@pisco.westfalen.local>

Source: pulseaudio
X-Debbugs-CC: team at security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for pulseaudio.

CVE-2026-14330[0]:
| Multiple unbounded alloca() calls in the PulseAudio protocol server.

https://bugzilla.redhat.com/show_bug.cgi?id=2495907


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-14330
    https://www.cve.org/CVERecord?id=CVE-2026-14330

Please adjust the affected versions in the BTS as needed.


From owner at bugs.debian.org  Thu Jul  2 21:01:03 2026
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 02 Jul 2026 20:01:03 +0000
Subject: Processed: tagging 1141306, bug 1141306 is forwarded to
 https://github.com/pion/dtls/pull/839, tagging 1141307 ...
References: <1783022354-448092296@bts.debian.org>
Message-ID: <handler.s.C.17830223583664185.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> tags 1141306 + upstream
Bug #1141306 [src:golang-github-pion-dtls.v2] golang-github-pion-dtls.v2: CVE-2026-54908
Added tag(s) upstream.
> forwarded 1141306 https://github.com/pion/dtls/pull/839
Bug #1141306 [src:golang-github-pion-dtls.v2] golang-github-pion-dtls.v2: CVE-2026-54908
Set Bug forwarded-to-address to 'https://github.com/pion/dtls/pull/839'.
> tags 1141307 + upstream
Bug #1141307 [src:golang-github-pion-dtls.v3] golang-github-pion-dtls.v3: CVE-2026-54908
Warning: Unknown package 'src:golang-github-pion-dtls.v3'
Added tag(s) upstream.
Warning: Unknown package 'src:golang-github-pion-dtls.v3'
> forwarded 1141307 https://github.com/pion/dtls/pull/839
Bug #1141307 [src:golang-github-pion-dtls.v3] golang-github-pion-dtls.v3: CVE-2026-54908
Warning: Unknown package 'src:golang-github-pion-dtls.v3'
Set Bug forwarded-to-address to 'https://github.com/pion/dtls/pull/839'.
Warning: Unknown package 'src:golang-github-pion-dtls.v3'
> tags 1141309 + upstream
Bug #1141309 [src:pulseaudio] pulseaudio: CVE-2026-14330
Added tag(s) upstream.
> tags 1141308 + upstream
Bug #1141308 [src:pipewire] pipewire: CVE-2026-14324
Added tag(s) upstream.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1141306: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141306
1141307: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141307
1141308: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141308
1141309: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141309
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From support at a2x.fr  Thu Jul  2 21:23:25 2026
From: support at a2x.fr (Cloud Storage)
Date: Thu, 02 Jul 2026 20:23:25 +0000
Subject: Data Protection Alert: Storage Full
Message-ID: <ccc9ff17fa7548eeb0b2f25b35e25875@a2x.fr>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-pulseaudio-devel/attachments/20260702/4b7777cc/attachment.htm>

From support at buddd.nl  Fri Jul  3 19:40:39 2026
From: support at buddd.nl (Billing.)
Date: Fri, 03 Jul 2026 18:40:39 +0000
Subject: Unlock more space for your memories
Message-ID: <6750af07008d47848f01df64ab11858e@buddd.nl>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-pulseaudio-devel/attachments/20260703/b99138b9/attachment.htm>

From support at carolineparent-et-associes.fr  Sun Jul  5 19:05:29 2026
From: support at carolineparent-et-associes.fr (Health Breakthrough)
Date: Sun, 05 Jul 2026 18:05:29 +0000
Subject: A small change, surprising results
Message-ID: <8427556f71d64756940b10b5713a8065@carolineparent-et-associes.fr>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-pulseaudio-devel/attachments/20260705/9dddf160/attachment.htm>

From support at amvanriemsdijk.nl  Fri Jul 10 21:16:15 2026
From: support at amvanriemsdijk.nl (Nerve Health Insider)
Date: Fri, 10 Jul 2026 20:16:15 +0000
Subject: Getting your life back from nerve pain
Message-ID: <921fe1e678794d8180ef79cd36c96485@amvanriemsdijk.nl>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-pulseaudio-devel/attachments/20260710/e0f8600d/attachment.htm>

From owner at bugs.debian.org  Wed Jul 15 16:13:02 2026
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Wed, 15 Jul 2026 15:13:02 +0000
Subject: Processed: reassign 1141112 to pavucontrol
References: <1784128154-1102-bts-tar@debian.org>
Message-ID: <handler.s.C.17841281562891798.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> reassign 1141112 pavucontrol
Bug #1141112 [volumecontrol.app] Subject: volumecontrol.app: pavucontrol
Bug reassigned from package 'volumecontrol.app' to 'pavucontrol'.
Ignoring request to alter found versions of bug #1141112 to the same values previously set
Ignoring request to alter fixed versions of bug #1141112 to the same values previously set
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1141112: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141112
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


