[CLSA-2026:1790174444] pipewire: Fix of CVE-2026-5674
Type:
security
Severity:
Important
Release date:
2026-09-23 14:40:55 UTC
Description:
- CVE-2026-5674: restrict dlopen() of LADSPA plugins, libjack and PipeWire/SPA modules to the configured search paths
CVEs fixed:
Updated packages:
  • pipewire-1.0.1-1.el9.tuxcare.els2.i686.rpm
    sha:3321ace04d94e852bae60d572fa9a90835a0535c058c44f1f1532f4c10819f95
  • pipewire-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:ec74962557c29975ff65e36a4777239659f93878c2cf8e49103433b2ca67a6e4
  • pipewire-alsa-1.0.1-1.el9.tuxcare.els2.i686.rpm
    sha:9b70d211b80d144ec08755ba41fa3e433b137129b05c3bb897c1ec44c4711e77
  • pipewire-alsa-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:576fa3e90fbc5c97ec0d8379e44c3e0f36ecd10a883b5cc6e282f2bf46c5a658
  • pipewire-devel-1.0.1-1.el9.tuxcare.els2.i686.rpm
    sha:70f18f89c6baa011c40fa64cbd3493a40afe8dc5b3190918bab3fc99e9425adb
  • pipewire-devel-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:4a62cef5b07a6cc23ac58b82c6b5a57b24ef03cd765ea5cf774e6fa83a7f8232
  • pipewire-doc-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:732379495f5f78025aa0941727c12119d0ecdaac65f36acbdf800adf4054b611
  • pipewire-gstreamer-1.0.1-1.el9.tuxcare.els2.i686.rpm
    sha:cc9685b746d296ce67710b0f3055985f46f9cd8cc0eb25df4d137ffc24e07320
  • pipewire-gstreamer-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:e5c4de3d0a49b49b0a08d3533fe0ac2c12188c1cce3a9821679c0fed626c6b2a
  • pipewire-jack-audio-connection-kit-1.0.1-1.el9.tuxcare.els2.i686.rpm
    sha:74f49afd8790e9a4fa28e7142490a8f2d91ef804e2815ae2237bc0d7b37e9e82
  • pipewire-jack-audio-connection-kit-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:8aa148bdbec774b37fdb2e6753d81053985e910cceee4d09f734a9971fddff2f
  • pipewire-jack-audio-connection-kit-devel-1.0.1-1.el9.tuxcare.els2.i686.rpm
    sha:8fe45e96d3e45dd986eb935350937e951280c98cee23eba9ae14a3a5033f717c
  • pipewire-jack-audio-connection-kit-devel-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:e7ec8e8a0268910d0afb777d269b9f5ec28071fa3705ac38686312250b84d72c
  • pipewire-jack-audio-connection-kit-libs-1.0.1-1.el9.tuxcare.els2.i686.rpm
    sha:74664a80d55f904b3a4dc62ed39a7f355bb7f0d632112d74499489385ac940d5
  • pipewire-jack-audio-connection-kit-libs-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:a8971890663744c36f7083cae795c6057e5d43ff029cacfee2c7d5b549ddcc09
  • pipewire-libs-1.0.1-1.el9.tuxcare.els2.i686.rpm
    sha:1191add2ff9dfd39416e732fce1863fdcb586a4ea22eeb98b609db48dd0a0de8
  • pipewire-libs-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:86d68b8926c34cee73222975ca17d2f6e597ce84a036b88bc3691745b567924d
  • pipewire-module-x11-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:28f526723565c135d101630289636e6176b6d6392b6dba4ce1d4c2f2ab98b8ff
  • pipewire-plugin-vulkan-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:0cbea0d5ccc2412e7e5abfff067a6f644f9979e9fbe6fc24511aa004c6e8474c
  • pipewire-pulseaudio-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:27053eef53665052b430e693d606e3ad75d53efaecf5bc75cc08a97df536d07c
  • pipewire-utils-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:f09cd4a2d7990cd79e115e6f072c9b3da5a81610839681a07056d46c7d5a9336
  • pipewire-v4l2-1.0.1-1.el9.tuxcare.els2.x86_64.rpm
    sha:28c6eb3d60bdf90699973104bc81a0b716ad2f1ed1dfced4d028e0187ad3edd3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.