Most recent entries from all

ALSA-2026:61240 — Moderate: pipewire security update

Affected: AlmaLinux:9: pipewire, AlmaLinux:9: pipewire-alsa, AlmaLinux:9: pipewire-devel, AlmaLinux:9: pipewire-gstreamer, AlmaLinux:9: pipewire-jack-audio-connection-kit, AlmaLinux:9: pipewire-jack-audio-connection-kit-devel, AlmaLinux:9: pipewire-jack-audio-connection-kit-libs, AlmaLinux:9: pipewire-libs, AlmaLinux:9: pipewire-module-x11, AlmaLinux:9: pipewire-pulseaudio and 1 more

PipeWire is a multimedia server for Linux and other Unix like operating systems.

Security Fix(es):

* pipewire: RAOP RTSP NULL Deref (CVE-2026-14324) * pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-14324

Affected: Alpaquita:25: pipewire, Alpaquita:stream: pipewire

EUVD-2026-361715

fkie_cve-2026-14324

RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

GHSA-529g-ppv4-566r

RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

OESA-2026-3114 — pipewire security update

Affected: openEuler:24.03-LTS-SP3: pipewire

is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fix(es):

RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.(CVE-2026-14324)

RHSA-2026:61240 — Red Hat Security Advisory: pipewire security update

pipewire: RAOP RTSP NULL Deref pipewire: Pulse Server alloca Stack Overflow

RLSA-2026:61240 — Moderate: pipewire security update

Affected: Rocky Linux:9: pipewire

PipeWire is a multimedia server for Linux and other Unix like operating systems.

Security Fix(es):

* pipewire: RAOP RTSP NULL Deref (CVE-2026-14324)

* pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-14324

Affected: Ubuntu:24.04:LTS: pipewire, Ubuntu:25.10: pipewire, Ubuntu:26.04:LTS: pipewire

RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

WID-SEC-W-2026-3095 — Red Hat Enterprise Linux (pipewire,dbus-broker): Mehrere Schwachstellen ermöglichen Denial of Service

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.