Summary
[1.4.11-1]
- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
Resolves: RHEL-164828
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | pipewire | 0:1.4.11-1.el9_8 |
| Oracle Linux · 9 | pipewire-alsa | 0:1.4.11-1.el9_8 |
| Oracle Linux · 9 | pipewire-devel | 0:1.4.11-1.el9_8 |
| Oracle Linux · 9 | pipewire-gstreamer | 0:1.4.11-1.el9_8 |
| Oracle Linux · 9 | pipewire-jack-audio-connection-kit | 0:1.4.11-1.el9_8 |
| Oracle Linux · 9 | pipewire-jack-audio-connection-kit-devel | 0:1.4.11-1.el9_8 |
| Oracle Linux · 9 | pipewire-jack-audio-connection-kit-libs | 0:1.4.11-1.el9_8 |
| Oracle Linux · 9 | pipewire-libs | 0:1.4.11-1.el9_8 |
| Oracle Linux · 9 | pipewire-pulseaudio | 0:1.4.11-1.el9_8 |
| Oracle Linux · 9 | pipewire-utils | 0:1.4.11-1.el9_8 |
Vulnerabilities 1
-
High 8.8
Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading
A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed enviro…