Linux · Security advisory · August 31, 2026

ALSA-2026:61241: Security update for 12 packages

ALSA-2026:61241, released August 31, 2026, fixes 1 CVE across 12 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0031
24th percentile

Fixed package versions

ProductReleaseFixed in
pipewirealmalinux 101.4.11-1.el10_2.1
pipewire-alsaalmalinux 101.4.11-1.el10_2.1
pipewire-develalmalinux 101.4.11-1.el10_2.1
pipewire-gstreameralmalinux 101.4.11-1.el10_2.1
pipewire-jack-audio-connection-kitalmalinux 101.4.11-1.el10_2.1
pipewire-jack-audio-connection-kit-develalmalinux 101.4.11-1.el10_2.1
pipewire-jack-audio-connection-kit-libsalmalinux 101.4.11-1.el10_2.1
pipewire-libsalmalinux 101.4.11-1.el10_2.1
pipewire-module-x11almalinux 101.4.11-1.el10_2.1
pipewire-plugin-libcameraalmalinux 101.4.11-1.el10_2.1
pipewire-pulseaudioalmalinux 101.4.11-1.el10_2.1
pipewire-utilsalmalinux 101.4.11-1.el10_2.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2026-14324 pipewire: RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return. 6.5 0.0031 None reported
Showing 1 to 1 of 1 1