[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-5674/pipewire

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0c9550c6 by Salvatore Bonaccorso at 2026-09-18T06:03:41+02:00
Update status for CVE-2026-5674/pipewire

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -77272,9 +77272,14 @@ CVE-2026-60063 (An out-of-bounds write vulnerability in the Productivity Suite a
 CVE-2026-60060 (Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerab ...)
 	NOT-FOR-US: Tera Term
 CVE-2026-5674 (A flaw was found in PipeWire, a multimedia server. This vulnerability  ...)
-	- pipewire <unfixed> (bug #1142416)
+	- pipewire 1.6.6-1 (bug #1142416)
 	[trixie] - pipewire <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2455341
+	NOTE: Fixed by: https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/6bc07dfe0e18043aaf99f866b2c37f20e4a5e065 (1.6.3)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/821b62dac5f9718b9d5d48ca967f4c4b6954bda2 (1.6.3)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/8be0d7534b8642b37ae53895e0c82e680b2b4a73 (1.6.4)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/0b11792194f2ee985f8a8f15776ccec357bc8097 (1.6.5)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/aae60d8db3b0f1a1a52e2999e188ed9721b287f9 (1.6.6)
 CVE-2026-59867 (Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1  ...)
 	NOT-FOR-US: Kiota
 CVE-2026-59866 (Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c9550c66c3cef5936fcaf7c937caf84e0f6fde4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0c9550c66c3cef5936fcaf7c937caf84e0f6fde4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260918/46fb9c6e/attachment.htm>