{"id":"ALSA-2026:47083","summary":"Important: pipewire security update","details":"PipeWire is a multimedia server for Linux and other Unix like operating systems.  \n\nSecurity Fix(es):  \n\n  * pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading (CVE-2026-5674)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-07-31T13:00:04.878144068Z","published":"2026-07-28T00:00:00Z","related":["CVE-2026-5674"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:47083"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-5674"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2455341"},{"type":"ADVISORY","url":"https://errata.almalinux.org/10/ALSA-2026-47083.html"}],"affected":[{"package":{"name":"pipewire","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-alsa","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-alsa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-devel","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-gstreamer","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-gstreamer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-jack-audio-connection-kit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit-devel","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-jack-audio-connection-kit-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit-libs","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-jack-audio-connection-kit-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-libs","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-module-x11","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-module-x11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-plugin-libcamera","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-plugin-libcamera"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-pulseaudio","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-pulseaudio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}},{"package":{"name":"pipewire-utils","ecosystem":"AlmaLinux:10","purl":"pkg:rpm/almalinux/pipewire-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el10_2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:47083.json"}}],"schema_version":"1.7.5"}