[Pkg-utopia-maintainers] Bug#1141309: PR ready in salsa

Agathe Porte agathe.porte at oss.qualcomm.com
Fri Sep 18 14:12:18 BST 2026


Hello,

I have created the following PR that addresses this CVE:
https://salsa.debian.org/utopia-team/pipewire/-/merge_requests/37

It had some conflicts that had to be fixed manually. The origin of the
patch is upstream here:
https://gitlab.freedesktop.org/pipewire/pipewire/-/commit/ed2c0ad4eee1695381e06f7accb902cbcf547420.patch

Since this patch does not seem to be part of any pipewire release yet
according to the freedesktop gitlab webui as well as some git-fu I run
locally to confirm, we cannot fix this problem by simply importing a new
upstream release.

I am also planning to propagate this fix to stable releases and
backports as needed.

Thanks in advance,

Agathe.



More information about the Pkg-utopia-maintainers mailing list