Summary
[1.4.11-1]
- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
Resolves: RHEL-164823
[1.4-6-1]
- Update version to 1.4.6
Resolves: DESKTOP-1857
[1.2.7-1]
- Update version to 1.2.7
- Resolves: RHEL-76017
[1.2.6-3]
- Enable libcamera support in RHEL-10
- Resolves: RHEL-64753
[1.2.6-2]
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
[1.2.6-1]
- Update version to 1.2.6
[1.2.3-1]
- Update version to 1.2.3
[1.2.1-3]
- pipewire-jack-libs Requires pipewire-jack on RHEL
[1.2.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
[1.2.1-1]
- Update version to 1.2.1
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | pipewire | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-alsa | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-devel | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-gstreamer | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-jack-audio-connection-kit | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-jack-audio-connection-kit-devel | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-jack-audio-connection-kit-libs | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-libs | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-module-x11 | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-plugin-libcamera | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-pulseaudio | 0:1.4.11-1.el10_2 |
| Oracle Linux · 10 | pipewire-utils | 0:1.4.11-1.el10_2 |
Vulnerabilities 1
-
High 8.8
Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading
A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed enviro…