Red Hat Product Errata RHSA-2026:47083 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47083 - Security Advisory Overview Updated Packages Synopsis Important: pipewire security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for pipewire is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fix(es): pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading (CVE-2026-5674) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2455341 - CVE-2026-5674 pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVEs CVE-2026-5674 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM pipewire-1.4.11-1.el10_2.src.rpm SHA-256: 6be78bc1a232fb47587ea60f2d530dae8df7d3a09eda9aa7c424a9c813590f39 x86_64 pipewire-1.4.11-1.el10_2.x86_64.rpm SHA-256: 91324e62ab3f429d9208aec42d70e32e81b50170272047ed9aecd2e4202bc2ff pipewire-alsa-1.4.11-1.el10_2.x86_64.rpm SHA-256: f27107f5643c003d83af3a28f3edd640f7ab23482597c0038c0e7fd742be1222 pipewire-alsa-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 62b2495e56c503338c4d2599dc3b698d33bd651d799c3356329473a646aa5c10 pipewire-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 02695639cf75cbdaa18951996b784e6a3e94a40dec13f3c80c8afb2d6082e798 pipewire-debugsource-1.4.11-1.el10_2.x86_64.rpm SHA-256: ab499e98cb53dfb107ff11446e6c34397ee9795a0a36c4b7e228ce9e1308d25a pipewire-devel-1.4.11-1.el10_2.x86_64.rpm SHA-256: bca2a873b9ffafb4ee1a27e78f67f716137414bfd1aad62ae202cc413fa9d0ab pipewire-gstreamer-1.4.11-1.el10_2.x86_64.rpm SHA-256: e61502496e83aa98152c24b8bdc18c584de1559090d820e53bb646754e298d0b pipewire-gstreamer-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 46c318bffef9790bc3581890a8b5e63782b19ec2d2edd5613db15507a5c02eaa pipewire-jack-audio-connection-kit-1.4.11-1.el10_2.x86_64.rpm SHA-256: b77087326e85fe16569ab46174bfef21f1d54b4c4d970bac851a7498c82d9b24 pipewire-jack-audio-connection-kit-devel-1.4.11-1.el10_2.x86_64.rpm SHA-256: fb367776191709316101f46e5ef45ecb36994cdf6a4dbefc72e45aa18ecf5df6 pipewire-jack-audio-connection-kit-libs-1.4.11-1.el10_2.x86_64.rpm SHA-256: 5eaa8bd27b6b55cf3118acb0b2f64660a15b0ae23bc32526a434438139ec8628 pipewire-jack-audio-connection-kit-libs-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 7ca1036ce2891281d86f5671d4582deb956d118ed8d0c861f84ae4ad34a93b3a pipewire-libs-1.4.11-1.el10_2.x86_64.rpm SHA-256: 720f1f52202346447a0fbe381ce2556b37a76f8100e25b6da16a34dfb899afcb pipewire-libs-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 746223155a5f038e0055ee93ef853c72a41aac9eb9ded95a75cd30a468e4b58e pipewire-module-x11-1.4.11-1.el10_2.x86_64.rpm SHA-256: 1d0e9f4e79e33288c9e5ec55b465be2ec1d0472846783460588012cb57b626e7 pipewire-module-x11-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: b2a07cf79da74dc06d9a9991df75a939e6744dd3cf3421ccee53a55534cc4e25 pipewire-plugin-libcamera-1.4.11-1.el10_2.x86_64.rpm SHA-256: 46b66a5aac4d7a209012b19e48f6305e87760148f4955b223633910547fdbcc1 pipewire-plugin-libcamera-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: a9e88ba35480ea3857e1f8eff81be481ab741339aa480de87a5a4dba1fe132b4 pipewire-plugin-vulkan-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 3862779306660f55cfd99e9eb2ebae0ec4bac41e7252c845b22c0f8bec76ae3a pipewire-pulseaudio-1.4.11-1.el10_2.x86_64.rpm SHA-256: 193db36417d60acb6cfbc868402ebb2cbc7a5d1c2cc1a11570d828c2470386c1 pipewire-pulseaudio-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 8c8149b94a1744670c350b907c26e05d29f98fb6346599e8884f88b2e80372c2 pipewire-utils-1.4.11-1.el10_2.x86_64.rpm SHA-256: 09d732e55add6cccf860ba036a542e0cb1a04092ac11c17e3901fb6c912d9888 pipewire-utils-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 43378baf0b8692b4efef0e0a1272f3e07110a79a2d3668245dfdf1537953c6d5 pipewire-v4l2-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: d753277eec32557106fcea630f4a133b5d259dc6263de8cfacc8967ef8b71730 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM pipewire-1.4.11-1.el10_2.src.rpm SHA-256: 6be78bc1a232fb47587ea60f2d530dae8df7d3a09eda9aa7c424a9c813590f39 x86_64 pipewire-1.4.11-1.el10_2.x86_64.rpm SHA-256: 91324e62ab3f429d9208aec42d70e32e81b50170272047ed9aecd2e4202bc2ff pipewire-alsa-1.4.11-1.el10_2.x86_64.rpm SHA-256: f27107f5643c003d83af3a28f3edd640f7ab23482597c0038c0e7fd742be1222 pipewire-alsa-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 62b2495e56c503338c4d2599dc3b698d33bd651d799c3356329473a646aa5c10 pipewire-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 02695639cf75cbdaa18951996b784e6a3e94a40dec13f3c80c8afb2d6082e798 pipewire-debugsource-1.4.11-1.el10_2.x86_64.rpm SHA-256: ab499e98cb53dfb107ff11446e6c34397ee9795a0a36c4b7e228ce9e1308d25a pipewire-devel-1.4.11-1.el10_2.x86_64.rpm SHA-256: bca2a873b9ffafb4ee1a27e78f67f716137414bfd1aad62ae202cc413fa9d0ab pipewire-gstreamer-1.4.11-1.el10_2.x86_64.rpm SHA-256: e61502496e83aa98152c24b8bdc18c584de1559090d820e53bb646754e298d0b pipewire-gstreamer-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 46c318bffef9790bc3581890a8b5e63782b19ec2d2edd5613db15507a5c02eaa pipewire-jack-audio-connection-kit-1.4.11-1.el10_2.x86_64.rpm SHA-256: b77087326e85fe16569ab46174bfef21f1d54b4c4d970bac851a7498c82d9b24 pipewire-jack-audio-connection-kit-devel-1.4.11-1.el10_2.x86_64.rpm SHA-256: fb367776191709316101f46e5ef45ecb36994cdf6a4dbefc72e45aa18ecf5df6 pipewire-jack-audio-connection-kit-libs-1.4.11-1.el10_2.x86_64.rpm SHA-256: 5eaa8bd27b6b55cf3118acb0b2f64660a15b0ae23bc32526a434438139ec8628 pipewire-jack-audio-connection-kit-libs-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 7ca1036ce2891281d86f5671d4582deb956d118ed8d0c861f84ae4ad34a93b3a pipewire-libs-1.4.11-1.el10_2.x86_64.rpm SHA-256: 720f1f52202346447a0fbe381ce2556b37a76f8100e25b6da16a34dfb899afcb pipewire-libs-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 746223155a5f038e0055ee93ef853c72a41aac9eb9ded95a75cd30a468e4b58e pipewire-module-x11-1.4.11-1.el10_2.x86_64.rpm SHA-256: 1d0e9f4e79e33288c9e5ec55b465be2ec1d0472846783460588012cb57b626e7 pipewire-module-x11-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: b2a07cf79da74dc06d9a9991df75a939e6744dd3cf3421ccee53a55534cc4e25 pipewire-plugin-libcamera-1.4.11-1.el10_2.x86_64.rpm SHA-256: 46b66a5aac4d7a209012b19e48f6305e87760148f4955b223633910547fdbcc1 pipewire-plugin-libcamera-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: a9e88ba35480ea3857e1f8eff81be481ab741339aa480de87a5a4dba1fe132b4 pipewire-plugin-vulkan-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 3862779306660f55cfd99e9eb2ebae0ec4bac41e7252c845b22c0f8bec76ae3a pipewire-pulseaudio-1.4.11-1.el10_2.x86_64.rpm SHA-256: 193db36417d60acb6cfbc868402ebb2cbc7a5d1c2cc1a11570d828c2470386c1 pipewire-pulseaudio-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 8c8149b94a1744670c350b907c26e05d29f98fb6346599e8884f88b2e80372c2 pipewire-utils-1.4.11-1.el10_2.x86_64.rpm SHA-256: 09d732e55add6cccf860ba036a542e0cb1a04092ac11c17e3901fb6c912d9888 pipewire-utils-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: 43378baf0b8692b4efef0e0a1272f3e07110a79a2d3668245dfdf1537953c6d5 pipewire-v4l2-debuginfo-1.4.11-1.el10_2.x86_64.rpm SHA-256: d753277eec32557106fcea630f4a133b5d259dc6263de8cfacc8967ef8b71730 Red Hat Enterprise Linux for IBM z Systems 10 SRPM pipewire-1.4.11-1.el10_2.src.rpm SHA-256: 6be78bc1a232fb47587ea60f2d530dae8df7d3a09eda9aa7c424a9c813590f39 s390x pipewire-1.4.11-1.el10_2.s390x.rpm SHA-256: 83c68e8cb17f2758dbe93ce8c38ad182f07a16412c180329cdc49ec31bb1e02e pipewire-alsa-1.4.11-1.el10_2.s390x.rpm SHA-256: a4992adad8af66dca9a925c2550269d448d5be91863759d3a8b904245645a113 pipewire-alsa-debuginfo-1.4.11-1.el10_2.s390x.rpm SHA-256: 593c0dc5614926e47eb68ff16938d75d81295d5c25ab6f1e4d61f4154ec3ffec pipewire-debuginfo-1.4.11-1.el10_2.s390x.rpm SHA-256: d0383e288b2bb2d1f74e960fa6a791b6a4974fb9b3a43256eb1980bb07215b2d pipewire-debugsource-1.4.11-1.el10_2.s390x.rpm SHA-256: 29a57362ac09fb28d9b3dca383e9ea5f5f798c458715fc8b0e052d1096cddb71 pipewire-devel-1.4.11-1.el10_2.s390x.rpm SHA-256: 6b232d77f31f95d15c04b82c0225e4fd