{"id":"RHSA-2026:61240","summary":"Red Hat Security Advisory: pipewire security update","modified":"2026-08-31T10:16:38.735301083Z","published":"2026-08-31T10:12:03Z","upstream":["CVE-2026-14324","CVE-2026-14330"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:61240"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#moderate"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2495903"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2495907"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61240.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-14324"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-14324"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14324"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-14330"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-14330"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14330"}],"affected":[{"package":{"name":"pipewire","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-alsa","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-alsa"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-alsa-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-alsa-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-gstreamer","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-gstreamer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-gstreamer-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-gstreamer-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-jack-audio-connection-kit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-jack-audio-connection-kit-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit-libs","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-jack-audio-connection-kit-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-jack-audio-connection-kit-libs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-jack-audio-connection-kit-libs-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-libs","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-libs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-libs-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-module-x11","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-module-x11"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-module-x11-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-module-x11-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-plugin-vulkan-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-plugin-vulkan-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-pulseaudio","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-pulseaudio"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-pulseaudio-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-pulseaudio-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-utils","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-utils-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-utils-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}},{"package":{"name":"pipewire-v4l2-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream","purl":"pkg:rpm/redhat/pipewire-v4l2-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.11-1.el9_8.2"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:61240.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}