{"id":"ALSA-2026:61240","summary":"Moderate: pipewire security update","details":"PipeWire is a multimedia server for Linux and other Unix like operating systems.  \n\nSecurity Fix(es):  \n\n  * pipewire: RAOP RTSP NULL Deref (CVE-2026-14324)\n  * pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-09-02T10:45:04.173093678Z","published":"2026-08-31T00:00:00Z","related":["CVE-2026-14324","CVE-2026-14330"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:61240"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-14324"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-14330"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2495903"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2495907"},{"type":"ADVISORY","url":"https://errata.almalinux.org/9/ALSA-2026-61240.html"}],"affected":[{"package":{"name":"pipewire","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-alsa","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-alsa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-gstreamer","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-gstreamer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-jack-audio-connection-kit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit-devel","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-jack-audio-connection-kit-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit-libs","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-jack-audio-connection-kit-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-libs","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-module-x11","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-module-x11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-pulseaudio","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-pulseaudio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}},{"package":{"name":"pipewire-utils","ecosystem":"AlmaLinux:9","purl":"pkg:rpm/almalinux/pipewire-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:61240.json"}}],"schema_version":"1.9.0"}