{"id":"ALSA-2026:47082","summary":"Important: pipewire security update","details":"PipeWire is a multimedia server for Linux and other Unix like operating systems.  \n\nSecurity Fix(es):  \n\n  * pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading (CVE-2026-5674)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-08-06T16:15:05.321363890Z","published":"2026-07-28T00:00:00Z","related":["CVE-2026-5674"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:47082"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-5674"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2455341"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-47082.html"}],"affected":[{"package":{"name":"pipewire","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-alsa","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-alsa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-gstreamer","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-gstreamer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-jack-audio-connection-kit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-jack-audio-connection-kit-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit-libs","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-jack-audio-connection-kit-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-libs","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-module-x11","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-module-x11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-pulseaudio","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-pulseaudio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}},{"package":{"name":"pipewire-utils","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:47082.json"}}],"schema_version":"1.8.0"}