Your message dated Mon, 21 Sep 2026 09:44:04 +0000
with message-id <[email protected]>
and subject line Bug#1141309: fixed in pipewire 1.6.9-2
has caused the Debian Bug report #1141309,
regarding pulseaudio: CVE-2026-14330
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1141309: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141309
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: pulseaudio
X-Debbugs-CC: [email protected]
Severity: important
Tags: security
Hi,
The following vulnerability was published for pulseaudio.
CVE-2026-14330[0]:
| Multiple unbounded alloca() calls in the PulseAudio protocol server.
https://bugzilla.redhat.com/show_bug.cgi?id=2495907
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-14330
https://www.cve.org/CVERecord?id=CVE-2026-14330
Please adjust the affected versions in the BTS as needed.
--- End Message ---
--- Begin Message ---
Source: pipewire
Source-Version: 1.6.9-2
Done: Dylan Aïssi <[email protected]>
We believe that the bug you reported is fixed in the latest version of
pipewire, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dylan Aïssi <[email protected]> (supplier of updated pipewire package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 21 Sep 2026 10:24:33 +0200
Source: pipewire
Architecture: source
Version: 1.6.9-2
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team
<[email protected]>
Changed-By: Dylan Aïssi <[email protected]>
Closes: 1141309
Changes:
pipewire (1.6.9-2) unstable; urgency=medium
.
[ Agathe Porte ]
* Import+rebase upstream patch for CVE-2026-14330 (Closes: #1141309)
.
[ Dylan Aïssi ]
* Bump minimum libcamera to 0.6.0
Checksums-Sha1:
e73db039263c020807043758e05a4cb220c6d9ea 4895 pipewire_1.6.9-2.dsc
07d6f17a236fb8bbe3e8cae9eb87bb3c11ab0e96 34132 pipewire_1.6.9-2.debian.tar.xz
34aa5d6eb2fa49843ac1cf3a5c686fe1af1bca5a 29737 pipewire_1.6.9-2_amd64.buildinfo
Checksums-Sha256:
e5ec430d51f53d5c9f7220cadf2943950c7b1ca3a51eb608ef6e7dbdeb5b5895 4895
pipewire_1.6.9-2.dsc
9ee24622dfd907c8f1283328632156d43d23013c7ce62b04ea8ed6991a1ae65c 34132
pipewire_1.6.9-2.debian.tar.xz
3c4c4c3db8ad3f79d2d4e05ea8519b0ff09aacd0cea77921054a9562c2f29542 29737
pipewire_1.6.9-2_amd64.buildinfo
Files:
69cad48473e1b9cc1578f48752d9058f 4895 libs optional pipewire_1.6.9-2.dsc
5583f9036e10ee5571183c22a1a1bd36 34132 libs optional
pipewire_1.6.9-2.debian.tar.xz
feb3ad3d47b420302ba3550028cea35c 29737 libs optional
pipewire_1.6.9-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=/2l7
-----END PGP SIGNATURE-----
pgp4uVqHjHb16.pgp
Description: PGP signature
--- End Message ---
