{"object_kind":"push","event_name":"push","before":"dac6b4f2c5dd3401b4d054b2bd91eeb85f195382","after":"c551408ec2f7af6083bfba098092c44a28876a23","ref":"refs/heads/master","ref_protected":true,"checkout_sha":"c551408ec2f7af6083bfba098092c44a28876a23","message":null,"user_id":3060,"user_name":"Wim Taymans","user_username":"wtaymans","user_email":"","user_avatar":"https://secure.gravatar.com/avatar/1ca1bed246cb9b95b7ead6d6be96bb09f0c112953140c8bb38b41aedf4465270?s=80&d=identicon","project_id":4753,"project":{"id":4753,"name":"pipewire","description":"Multimedia processing graphs","web_url":"https://gitlab.freedesktop.org/pipewire/pipewire","avatar_url":"https://gitlab.freedesktop.org/uploads/-/system/project/avatar/4753/pipewire.png","git_ssh_url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","git_http_url":"https://gitlab.freedesktop.org/pipewire/pipewire.git","namespace":"PipeWire","visibility_level":20,"path_with_namespace":"pipewire/pipewire","default_branch":"master","ci_config_path":"","homepage":"https://gitlab.freedesktop.org/pipewire/pipewire","url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","ssh_url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","http_url":"https://gitlab.freedesktop.org/pipewire/pipewire.git"},"commits":[{"id":"5d0e806bdbc513dc7a5ed2508d18312d072a9c24","message":"security: limit blocklist regex length in switch-on-connect module\n\nA PulseAudio client can load this module with an arbitrarily complex\nblocklist regex, causing catastrophic backtracking in regexec on\nevery new device. Cap the regex string at 1024 characters.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n","title":"security: limit blocklist regex length in switch-on-connect module","timestamp":"2026-04-30T17:40:25+02:00","url":"https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/5d0e806bdbc513dc7a5ed2508d18312d072a9c24","author":{"name":"Wim Taymans","email":"wtaymans@redhat.com"},"added":[],"modified":["src/modules/module-protocol-pulse/modules/module-switch-on-connect.c"],"removed":[]},{"id":"c551408ec2f7af6083bfba098092c44a28876a23","message":"security: reject path traversal in echo-cancel aec_method parameter\n\nThe aec_method parameter is interpolated into a SPA library path\nas \"aec/libspa-aec-%s\". A client could use \"../\" sequences to\nload arbitrary SPA plugins. Reject values containing \"..\" or \"/\".\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n","title":"security: reject path traversal in echo-cancel aec_method parameter","timestamp":"2026-04-30T17:44:28+02:00","url":"https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/c551408ec2f7af6083bfba098092c44a28876a23","author":{"name":"Wim Taymans","email":"wtaymans@redhat.com"},"added":[],"modified":["src/modules/module-protocol-pulse/modules/module-echo-cancel.c"],"removed":[]}],"total_commits_count":2,"push_options":{},"repository":{"name":"pipewire","url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","description":"Multimedia processing graphs","homepage":"https://gitlab.freedesktop.org/pipewire/pipewire","git_http_url":"https://gitlab.freedesktop.org/pipewire/pipewire.git","git_ssh_url":"git@ssh.gitlab.freedesktop.org:pipewire/pipewire.git","visibility_level":20}}