Moderate: Red Hat Security Advisory: pipewire security update

An update for pipewire is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

pipewire: Pulse Server alloca Stack Overflow

Multiple unbounded alloca calls in the PulseAudio protocol server...

RLSA-2026:61241 Moderate: pipewire security update

PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: RAOP RTSP NULL Deref CVE-2026-14324 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages...

pipewire security update

An update is available for pipewire. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PipeWire is a multimedia server for Linux and other Unix like operating...

OESA-2026-4634 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: Multiple unbounded alloca calls in the PulseAudio protocol server.CVE-2026-14330 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape...

OESA-2026-4632 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: Multiple unbounded alloca calls in the PulseAudio protocol server.CVE-2026-14330 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape...

OESA-2026-4633 pipewire security update

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: Multiple unbounded alloca calls in the PulseAudio protocol server.CVE-2026-14330 A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape...

Rocky Linux 10.2 [CIQ] Security Update: pipewire / pipewire-alsa / pipewire-alsa-debuginfo / etc (crlsa-2026_47083)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202647083 advisory. pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 Tenable has extracted the preceding description bloc...

Rocky Linux 9 [CIQ] Security Update: pipewire / pipewire-alsa / pipewire-alsa-debuginfo / etc (crlsa-2026_47082)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202647082 advisory. pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 Tenable has extracted the preceding description block...

Rocky Linux 9.6 [TuxCare] Security Update: pipewire / pipewire-alsa / pipewire-devel / pipewire-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788871614)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788871614 advisory. - RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 - Multiple unbounde...

AlmaLinux 9.6 [TuxCare] Security Update: pipewire / pipewire-alsa / pipewire-devel / pipewire-doc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788871614)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788871614 advisory. - RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 - Multiple unbounded...

Rocky Linux 9 [CIQ] Security Update: pipewire / pipewire-alsa / pipewire-alsa-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_61240)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661240 advisory. pipewire: RAOP RTSP NULL Deref CVE-2026-14324 pipewire: Pulse Server alloca Stack Overflow CVE-2026-14330 Tenable has extracted the preceding description...

Rocky Linux 9.6 [TuxCare] Security Update: pipewire / pipewire-alsa / pipewire-devel / pipewire-doc / etc (ALMALINUX9.6:CLSA-2026:1790174444)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790174444 advisory. - A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpa...

AlmaLinux 9.6 [TuxCare] Security Update: pipewire / pipewire-alsa / pipewire-devel / pipewire-doc / etc (ALMALINUX9.6:CLSA-2026:1790174444)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790174444 advisory. - A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak,...

Updated pipewire packages fix security vulnerabilities

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 Multiple unbounded alloca calls in the PulseAudio protocol server. CVE-2026-14330...

MGASA-2026-0443 Updated pipewire packages fix security vulnerabilities

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return. CVE-2026-14324 Multiple unbounded alloca calls in the PulseAudio protocol server. CVE-2026-14330...

CLSA-2026-1790174444 pipewire: Fix of CVE-2026-5674

CVE-2026-5674: restrict dlopen of LADSPA plugins, libjack and PipeWire/SPA modules to the configured search paths...

[SECURITY] Fedora 45 Update: obs-studio-plugin-pwvideo-0.2.4-3.fc45

Generic PipeWire video source for OBS. Useful for routing arbitrary video streams into your scenes...

[SECURITY] Fedora 45 Update: kpipewire-6.7.5-2.fc45

It is developed in C++ and it's main use target is QML components. As it's what's been useful, this framework focuses on graphical PipeWire features. If it was necessary, these could be included. At the moment we offer two main components: - KPipeWire: offers the main components to connect to and...

CLSA-2026-1788871614 pipewire: Fix of 2 CVEs

CVE-2026-14324: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return - CVE-2026-14330: Multiple unbounded alloca calls in the PulseAudio protocol server...