Red Hat Enterprise Linux (pipewire,dbus-broker): Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 3

• Medium 6.5
  CVE-2026-14324

  Pipewire: raop rtsp null deref

  RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux
  Jul 1, 2026
• Medium 5.5
  CVE-2026-14330

  Pipewire: pulse server alloca stack overflow

  Multiple unbounded alloca() calls in the PulseAudio protocol server.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux
  Jul 1, 2026
• Medium 5.5
  CVE-2026-16730

  Dbus-broker: dbus-broker: session bus denial of service via emfile during peer setup

  A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup (notably SO_PEERPIDFD) are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat OpenShift Container Platform 4 Linux Debian Ubuntu
  Jul 24, 2026

Revision history

1. 2026-11-03 #8

   Neue Updates von Red Hat aufgenommen

2. 2026-11-02 #7

   Neue Updates von Red Hat und Oracle Linux aufgenommen

3. 2026-11-01 #6

   Neue Updates von Red Hat aufgenommen

4. 2026-10-29 #5

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

5. 2026-09-03 #4

   Neue Updates von Oracle Linux aufgenommen

6. 2026-09-01 #3

   Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen

7. 2026-08-31 #2

   Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen

8. 2026-08-30 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:61240 vom 2026-08-30
  https://access.redhat.com/errata/RHSA-2026:61240
• Red Hat Security Advisory RHSA-2026:61241 vom 2026-08-30
  https://access.redhat.com/errata/RHSA-2026:61241
• Red Hat Security Advisory RHSA-2026:61355 vom 2026-08-30
  https://access.redhat.com/errata/RHSA-2026:61355
• Rocky Linux Security Advisory RLSA-2026:61355 vom 2026-09-01
  https://errata.build.resf.org/RLSA-2026:61355
• Rocky Linux Security Advisory RLSA-2026:61240 vom 2026-08-31
  https://errata.build.resf.org/RLSA-2026:61240
• Red Hat Security Advisory RHSA-2026:61340 vom 2026-08-31
  https://access.redhat.com/errata/RHSA-2026:61340
• Oracle Linux Security Advisory ELSA-2026-61240 vom 2026-09-02
  https://linux.oracle.com/errata/ELSA-2026-61240-0.html
• Rocky Linux Security Advisory RLSA-2026:61340 vom 2026-09-01
  https://errata.build.resf.org/RLSA-2026:61340
• Oracle Linux Security Advisory ELSA-2026-61355 vom 2026-09-02
  https://linux.oracle.com/errata/ELSA-2026-61355-0.html
• Oracle Linux Security Advisory ELSA-2026-61241 vom 2026-09-03
  https://linux.oracle.com/errata/ELSA-2026-61241-0.html
• Oracle Linux Security Advisory ELSA-2026-61340 vom 2026-09-03
  https://linux.oracle.com/errata/ELSA-2026-61340-0.html
• Rocky Linux Security Advisory RLSA-2026:61241 vom 2026-10-30
  https://errata.build.resf.org/RLSA-2026:61241
• Red Hat Security Advisory RHSA-2026:93442 vom 2026-11-02
  https://access.redhat.com/errata/RHSA-2026:93442
• Red Hat Security Advisory RHSA-2026:94436 vom 2026-11-03
  https://access.redhat.com/errata/RHSA-2026:94436
• Oracle Linux Security Advisory ELSA-2026-93442 vom 2026-11-02
  https://linux.oracle.com/errata/ELSA-2026-93442.html
• Red Hat Security Advisory RHSA-2026:94437 vom 2026-11-03
  https://access.redhat.com/errata/RHSA-2026:94437
• Red Hat Security Advisory RHSA-2026:94490 vom 2026-11-03
  https://access.redhat.com/errata/RHSA-2026:94490
• Rocky Linux Security Advisory RLSA-2026:93442 vom 2026-11-03
  https://errata.build.resf.org/RLSA-2026:93442
• Red Hat Security Advisory RHSA-2026:94997 vom 2026-11-04
  https://access.redhat.com/errata/RHSA-2026:94997