Red Hat Security Advisory

RHSA-2026:94997

pipewire security update

Released 2026-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) pipewire-1.2.7-1.el10_0.3, pipewire-alsa-1.2.7-1.el10_0.3, pipewire-devel-1.2.7-1.el10_0.3 +9

TI-2026-12114 CVE-2026-14324 · GHSA-529g-ppv4-566r

LOW 29

RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00313 Published 2026-07-01 Fixed in 1.4.11-1.el10_2.1, 1.2.7-1.el10_0.3 +3 CWE-476

TI-2026-12119 CVE-2026-14330 · GHSA-26rf-3h26-fc3w

LOW 24

Multiple unbounded alloca() calls in the PulseAudio protocol server.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00156 Published 2026-07-01 Fixed in 1.4.11-1.el10_2.2, 1.2.7-1.el10_0.3 +4 CWE-770