ALSA-2026:93442: Moderate: pipewire security update
Published Nov 2, 2026
·Updated
PipeWire is a multimedia server for Linux and other Unix like operating systems.
Security Fix(es):
pipewire: Pulse Server alloca Stack Overflow (CVE-2026-14330)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
12 affected componentsFixes available
almalinux/pipewire<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-alsa<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-devel<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-gstreamer<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-jack-audio-connection-kit<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-jack-audio-connection-kit-devel<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-jack-audio-connection-kit-libs<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-libs<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-module-x11<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-plugin-libcamera<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-pulseaudio<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
almalinux/pipewire-utils<1.4.11-1.el10_2.2
1.4.11-1.el10_2.2
Event History
Nov 2, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software